CVE-2005-0175
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response...
5.0 MediumFix available
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.
Exploit likelihood
40.7%Up 36.9 points since Feb 4, 2022
What each source reports
NVD Score used
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.
- Record
CVE-2005-0175- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE ListNo score
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.
- Record
CVE-2005-0175- Updated
- 2026-11-02
EUVDEUVD-2005-0176No score
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.
- Record
EUVD-2005-0176- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2rv8-xmpq-rpfxNo score
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response...
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.
- Record
GHSA-2rv8-xmpq-rpfx- Updated
- 2026-11-02
OSVNo score
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.
- Record
CVE-2005-0175- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-0175No score
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.
- Record
DEBIAN-CVE-2005-0175- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
squidDebian:12 | before 2.5.7-6 | 2.5.7-6 |
squidDebian:13 | before 2.5.7-6 | 2.5.7-6 |
squidDebian:14 | before 2.5.7-6 | 2.5.7-6 |
squidDebian:3.0 From an advisory covering 4 CVEs | before 2.4.6-2woody6, plus listed versions 2.4.6-2woody4 | 2.4.6-2woody6 |
squidRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squid-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squidRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squid-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squidRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squid-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
squidRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squid-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squidRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs | before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squid-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs | before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squidRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs | before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squid-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs | before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squidRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs | before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squid-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs | before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squidRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs | before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squid-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs | before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0175 is a medium vulnerability (CVSS 5.0) in Squid, published February 4, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 40.7%, the 98th percentile. Fixed in squid 2.5.7-6.
References
squid-cache.org/Versions/v2/2.5/bugs
redhat.com/archives/fedora-announce-list/2005-May/msg00025.html
fedoranews.org/updates/FEDORA--.shtml
kb.cert.org/vuls/id/625878
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11605
Show 61 moreShow less
securityfocus.com/bid/12433
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000931
mandriva.com/security/advisories?name=MDKSA-2005:034
debian.org/security/2005/dsa-667
marc.info?l=bugtraq&m=110780531820947&w=2
novell.com/linux/security/advisories/2005_06_squid.html
nvd.nist.gov/vuln/detail/CVE-2005-0175
github.com/advisories/GHSA-2rv8-xmpq-rpfx
security-tracker.debian.org/tracker/CVE-2005-0175
access.redhat.com/errata/RHSA-2005:060
bugzilla.redhat.com/show_bug.cgi?id=145545
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_060.json
cve.org/CVERecord?id=CVE-2005-0094