Skip to content
OpenAdvisories
Unscored RHSA-2005:060 9 CVEs

Red Hat Security Advisory: squid security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as squid 7:2.5.STABLE6-3.4E.3
Red Hat · RHEL 4 enterprise_linux:4::as squid-debuginfo 7:2.5.STABLE6-3.4E.3
Red Hat · RHEL 4 enterprise_linux:4::desktop squid 7:2.5.STABLE6-3.4E.3
Red Hat · RHEL 4 enterprise_linux:4::desktop squid-debuginfo 7:2.5.STABLE6-3.4E.3
Red Hat · RHEL 4 enterprise_linux:4::es squid 7:2.5.STABLE6-3.4E.3
Red Hat · RHEL 4 enterprise_linux:4::es squid-debuginfo 7:2.5.STABLE6-3.4E.3
Red Hat · RHEL 4 enterprise_linux:4::ws squid 7:2.5.STABLE6-3.4E.3
Red Hat · RHEL 4 enterprise_linux:4::ws squid-debuginfo 7:2.5.STABLE6-3.4E.3

Vulnerabilities 9

  • Unscored —
    CVE-2005-0094

    Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote…

    squid Debian
  • Unscored —
    CVE-2005-0095 EPSS 69%

    The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (cr…

    squid Debian
  • Unscored —
    CVE-2005-0096

    Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denia…

    squid Debian
  • Unscored —
    CVE-2005-0097 EPSS 11%

    The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a …

    squid Debian
  • Unscored —
    CVE-2005-0173 EPSS 32%

    squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control List…

    squid Debian
  • Unscored —
    CVE-2005-0174 EPSS 50%

    Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do …

    squid Debian
  • Unscored —
    CVE-2005-0175 EPSS 41%

    Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.

    squid Debian
  • Unscored —
    CVE-2005-0211 EPSS 22%

    Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and poss…

    squid Debian
  • Unscored —
    CVE-2005-0241 EPSS 70%

    The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context…

    squid Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    http://www.squid-cache.org/Advisories/SQUID-2005_1.txt
  • article
    http://www.squid-cache.org/Advisories/SQUID-2005_2.txt
  • article
    http://www.squid-cache.org/Advisories/SQUID-2005_3.txt
  • article
    http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-fakeauth_auth
  • article
    http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-ldap_spaces
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=145545
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=146161
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=146779
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=146785
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_060.json
  • report
    https://access.redhat.com/security/cve/CVE-2005-0094
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617455
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0094
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0094
  • report
    https://access.redhat.com/security/cve/CVE-2005-0095
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617456
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0095
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0095
  • report
    https://access.redhat.com/security/cve/CVE-2005-0096
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617457
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0096
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0096
  • report
    https://access.redhat.com/security/cve/CVE-2005-0097
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617458
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0097
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0097
  • report
    https://access.redhat.com/security/cve/CVE-2005-0173
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617478
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0173
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0173
  • report
    https://access.redhat.com/security/cve/CVE-2005-0174
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617479
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0174
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0174
  • report
    https://access.redhat.com/security/cve/CVE-2005-0175
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617480
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0175
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0175