Evil-DB LogoEvil-DB
← All CVEs

CVE-2005-0095

medium · 5

The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache numbers.

5
CVSS
68.8%
EPSS (exploit prob.)
99th
EPSS percentile
2005-01-15
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

VendorProductAffected versions
squidsquid2.0_patch2
squidsquid2.1_patch2
squidsquid2.3_.stable4
squidsquid2.3_.stable5
squidsquid2.3_stable5
squidsquid2.4
squidsquid2.4_.stable2
squidsquid2.4_.stable6
squidsquid2.4_.stable7
squidsquid2.4_stable7
squidsquid2.5.6
squidsquid2.5.stable1
squidsquid2.5.stable2
squidsquid2.5.stable3
squidsquid2.5.stable4
squidsquid2.5.stable5
squidsquid2.5.stable6
squidsquid2.5.stable7
squidsquid2.5_.stable1
squidsquid2.5_.stable3
squidsquid2.5_.stable4
squidsquid2.5_.stable5
squidsquid2.5_.stable6
squidsquid2.5_stable3
squidsquid2.5_stable4
squidsquid2.5_stable9
squidsquid2.6.stable1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2005-0095