CVE-2005-0211
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a...
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
- Record
CVE-2005-0211- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
- Record
CVE-2005-0211- Updated
- 2026-11-02
EUVDEUVD-2005-0212 No score
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
- Record
EUVD-2005-0212- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j8f6-3q8f-r8ch No score
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a...
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
- Record
GHSA-j8f6-3q8f-r8ch- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
- Record
CVE-2005-0211- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-0211 No score
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
- Record
DEBIAN-CVE-2005-0211- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
squidDebian:12 |
before 2.5.7-6 | 2.5.7-6 |
squidDebian:13 |
before 2.5.7-6 | 2.5.7-6 |
squidDebian:14 |
before 2.5.7-6 | 2.5.7-6 |
squidDebian:3.0 From an advisory covering 4 CVEs |
before 2.4.6-2woody6, plus listed versions 2.4.6-2woody4 |
2.4.6-2woody6 |
squidRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squid-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squidRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squid-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squidRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squid-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
squidRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squid-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squidRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squid-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squidRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squid-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squidRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squid-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squidRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squid-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0211 is a high vulnerability (CVSS 7.5) in Squid-cache Squid, published February 4, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 22.2%, the 97th percentile. Fixed in squid 2.5.7-6.
References
securitytracker.com/id?1013045
osvdb.org/13319
kb.cert.org/vuls/id/886006
secunia.com/advisories/14076
fedoranews.org/updates/FEDORA--.shtml
securityfocus.com/bid/12432
Show 62 moreShow less
squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_buffer_overflow.patch
redhat.com/support/errata/RHSA-2005-061.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9573
mandriva.com/security/advisories?name=MDKSA-2005:034
debian.org/security/2005/dsa-667
marc.info?l=bugtraq&m=110780531820947&w=2
novell.com/linux/security/advisories/2005_06_squid.html
nvd.nist.gov/vuln/detail/CVE-2005-0211
github.com/advisories/GHSA-j8f6-3q8f-r8ch
security-tracker.debian.org/tracker/CVE-2005-0211
access.redhat.com/errata/RHSA-2005:060
bugzilla.redhat.com/show_bug.cgi?id=145545
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_060.json
cve.org/CVERecord?id=CVE-2005-0094