Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2005-0095

The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache numbers.

Published

2005-01-15T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

2.9

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	squid	squid	2.0_patch2	Yes
Application	squid	squid	2.1_patch2	Yes
Application	squid	squid	2.3_.stable4	Yes
Application	squid	squid	2.3_.stable5	Yes
Application	squid	squid	2.3_stable5	Yes
Application	squid	squid	2.4	Yes
Application	squid	squid	2.4_.stable2	Yes
Application	squid	squid	2.4_.stable6	Yes
Application	squid	squid	2.4_.stable7	Yes
Application	squid	squid	2.4_stable7	Yes
Application	squid	squid	2.5.6	Yes
Application	squid	squid	2.5.stable1	Yes
Application	squid	squid	2.5.stable2	Yes
Application	squid	squid	2.5.stable3	Yes
Application	squid	squid	2.5.stable4	Yes
Application	squid	squid	2.5.stable5	Yes
Application	squid	squid	2.5.stable6	Yes
Application	squid	squid	2.5.stable7	Yes
Application	squid	squid	2.5_.stable1	Yes
Application	squid	squid	2.5_.stable3	Yes
Application	squid	squid	2.5_.stable4	Yes
Application	squid	squid	2.5_.stable5	Yes
Application	squid	squid	2.5_.stable6	Yes
Application	squid	squid	2.5_stable3	Yes
Application	squid	squid	2.5_stable4	Yes
Application	squid	squid	2.5_stable9	Yes
Application	squid	squid	2.6.stable1	Yes

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923 Patch, Vendor Advisory ([email protected])
http://fedoranews.org/updates/FEDORA--.shtml ([email protected])
http://secunia.com/advisories/13825 Patch, Vendor Advisory ([email protected])
http://security.gentoo.org/glsa/glsa-200501-25.xml Patch, Vendor Advisory ([email protected])
http://securitytracker.com/id?1012882 ([email protected])
http://www.debian.org/security/2005/dsa-651 Patch, Vendor Advisory ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2005:014 ([email protected])
http://www.novell.com/linux/security/advisories/2005_06_squid.html Patch, Vendor Advisory ([email protected])
http://www.osvdb.org/12886 ([email protected])
http://www.redhat.com/support/errata/RHSA-2005-060.html Patch, Vendor Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2005-061.html Patch, Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/12275 ([email protected])
http://www.squid-cache.org/Advisories/SQUID-2005_2.txt Patch, Vendor Advisory ([email protected])
http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_denial_of_service.patch Exploit, Vendor Advisory ([email protected])
http://www.trustix.org/errata/2005/0003/ Patch, Vendor Advisory ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10269 ([email protected])
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://fedoranews.org/updates/FEDORA--.shtml (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/13825 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-200501-25.xml Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1012882 (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2005/dsa-651 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2005:014 (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2005_06_squid.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/12886 (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2005-060.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2005-061.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/12275 (af854a3a-2127-422b-91ae-364da2661108)
http://www.squid-cache.org/Advisories/SQUID-2005_2.txt Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_denial_of_service.patch Exploit, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.trustix.org/errata/2005/0003/ Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10269 (af854a3a-2127-422b-91ae-364da2661108)