CVE-2005-0626
Fixed in a distro release EPSS 1%
Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies.
Products: squid
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | squid | 2.5.9-2 |
| Debian 13 | squid | 2.5.9-2 |
| Debian 14 | squid | 2.5.9-2 |
| Red Hat Enterprise Linux 3 | squid | 7:2.5.STABLE3-6.3E.13 |
| Red Hat Enterprise Linux 3 | squid-debuginfo | 7:2.5.STABLE3-6.3E.13 |
| Red Hat Enterprise Linux 4 | squid | 7:2.5.STABLE6-3.4E.9 |
| Red Hat Enterprise Linux 4 | squid-debuginfo | 7:2.5.STABLE6-3.4E.9 |