Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2005-02-06T05:00:00
Updated: 2017-10-10T00:57:01
Reserved: 2005-01-27T00:00:00
Link: CVE-2005-0174
JSON object: View
NVD Information
Status : Modified
Published: 2005-02-07T05:00:00.000
Modified: 2017-10-11T01:29:52.467
Link: CVE-2005-0174
JSON object: View
Redhat Information
No data.
CWE