CVE-2005-0211

NameCVE-2005-0211
DescriptionBuffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDSA-667-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
squid (PTS)bullseye4.13-10+deb11u3fixed
bullseye (security)4.13-10+deb11u6fixed
bookworm5.7-2+deb12u3fixed
bookworm (security)5.7-2+deb12u4fixed
trixie6.13-2fixed
trixie (security)6.13-2+deb13u1fixed
forky, sid7.2-2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
squidsourcewoody2.4.6-2woody6DSA-667-1
squidsource(unstable)2.5.7-6
Search for package or bug name: Reporting problems