Skip to content
OpenAdvisories
Unscored DSA-667-1 4 CVEs

squid - several

Published Feb 4, 2005 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 squid 2.4.6-2woody6

Vulnerabilities 4

  • Unscored —
    CVE-2005-0173 EPSS 32%

    squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control List…

  • Unscored —
    CVE-2005-0175 EPSS 41%

    Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.

  • Unscored —

    Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs …

  • Unscored —
    CVE-2005-0211 EPSS 22%

    Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and poss…