CVE-2005-1519
Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does...
Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups.
Exploit likelihood
What each source reports
NVD Score used
Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups.
- Record
CVE-2005-1519- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups.
- Record
CVE-2005-1519- Updated
- 2026-11-02
EUVDEUVD-2005-1522No score
Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups.
- Record
EUVD-2005-1522- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7j89-g7xj-9c6wNo score
Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does...
Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups.
- Record
GHSA-7j89-g7xj-9c6w- Updated
- 2026-11-02
OSVNo score
Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups.
- Record
CVE-2005-1519- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-1519No score
Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups.
- Record
DEBIAN-CVE-2005-1519- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
squidDebian:12 | before 2.5.9-9 | 2.5.9-9 |
squidDebian:13 | before 2.5.9-9 | 2.5.9-9 |
squidDebian:14 | before 2.5.9-9 | 2.5.9-9 |
squidDebian:3.0 | before 2.4.6-2woody9, plus listed versions 2.4.6-2woody42.4.6-2woody72.4.6-2woody8 | 2.4.6-2woody9 |
squidRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 7:2.5.STABLE3-6.3E.13 | 7:2.5.STABLE3-6.3E.13 |
squid-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 7:2.5.STABLE3-6.3E.13 | 7:2.5.STABLE3-6.3E.13 |
squidRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 7:2.5.STABLE3-6.3E.13 | 7:2.5.STABLE3-6.3E.13 |
squid-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 7:2.5.STABLE3-6.3E.13 | 7:2.5.STABLE3-6.3E.13 |
squidRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 7:2.5.STABLE3-6.3E.13 | 7:2.5.STABLE3-6.3E.13 |
squid-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 7:2.5.STABLE3-6.3E.13 | 7:2.5.STABLE3-6.3E.13 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
squidRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 7:2.5.STABLE3-6.3E.13 | 7:2.5.STABLE3-6.3E.13 |
squid-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 7:2.5.STABLE3-6.3E.13 | 7:2.5.STABLE3-6.3E.13 |
squidRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 7:2.5.STABLE6-3.4E.9 | 7:2.5.STABLE6-3.4E.9 |
squid-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 7:2.5.STABLE6-3.4E.9 | 7:2.5.STABLE6-3.4E.9 |
squidRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 7:2.5.STABLE6-3.4E.9 | 7:2.5.STABLE6-3.4E.9 |
squid-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 7:2.5.STABLE6-3.4E.9 | 7:2.5.STABLE6-3.4E.9 |
squidRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 7:2.5.STABLE6-3.4E.9 | 7:2.5.STABLE6-3.4E.9 |
squid-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 7:2.5.STABLE6-3.4E.9 | 7:2.5.STABLE6-3.4E.9 |
squidRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 7:2.5.STABLE6-3.4E.9 | 7:2.5.STABLE6-3.4E.9 |
squid-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 7:2.5.STABLE6-3.4E.9 | 7:2.5.STABLE6-3.4E.9 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-1519 is a medium vulnerability (CVSS 6.4) in Squid, published May 11, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.36%, the 83rd percentile. Fixed in squid 2.5.9-9.
References
securityfocus.com/bid/13592
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9976
redhat.com/archives/fedora-announce-list/2005-May/msg00025.html
secunia.com/advisories/15294
fedoranews.org/updates/FEDORA--.shtml
debian.org/security/2005/dsa-751
Show 35 moreShow less
vupen.com/english/advisories/2005/0521
squid-cache.org/Versions/v2/2.5/bugs
nvd.nist.gov/vuln/detail/CVE-2005-1519
github.com/advisories/GHSA-7j89-g7xj-9c6w
security-tracker.debian.org/tracker/CVE-2005-1519
access.redhat.com/errata/RHSA-2005:415
bugzilla.redhat.com/show_bug.cgi?id=125007
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_415.json
cve.org/CVERecord?id=CVE-1999-0710