CVE-2005-0174: Squid

Medium severity, CVSS 5.0. EPSS: 50.5% chance of exploitation in the next 30 days.

Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.

Affected products

• Squid Squid: version 2.5.6 only; version 2.5.stable1 only; version 2.5.stable2 only; version 2.5.stable3 only; version 2.5.stable4 only; version 2.5.stable5 only; …

Published 2005-02-07. Last modified 2026-06-16.