CVE-2005-0095
Fixed in a distro release EPSS 69%
The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache numbers.
Products: squid
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | squid | 2.5.7-4 |
| Debian 13 | squid | 2.5.7-4 |
| Debian 14 | squid | 2.5.7-4 |
| Debian 3.0 | squid | 2.4.6-2woody5 |
| Red Hat Enterprise Linux 3 | squid | 7:2.5.STABLE3-6.3E.7 |
| Red Hat Enterprise Linux 3 | squid-debuginfo | 7:2.5.STABLE3-6.3E.7 |
| Red Hat Enterprise Linux 4 | squid | 7:2.5.STABLE6-3.4E.3 |
| Red Hat Enterprise Linux 4 | squid-debuginfo | 7:2.5.STABLE6-3.4E.3 |