Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-02-06T05:00:00

Updated: 2024-08-07T21:05:25.615Z

Reserved: 2005-01-27T00:00:00

Link: CVE-2005-0174

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2005-02-07T05:00:00.000

Modified: 2024-11-20T23:54:33.683

Link: CVE-2005-0174

cve-icon Redhat

Severity :

Publid Date: 2005-01-31T00:00:00Z

Links: CVE-2005-0174 - Bugzilla