CVE-2005-0241
5.0
CVSS v2.0 Base Score
86.22%
HIGH RiskEPSS (99th percentile)
NVD-CWE-Other
The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size.
Published: 5/2/2005
Modified: 4/16/2026
Vulnerability Summary
CVSS v2 Score
5
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS Score (Exploitation Probability)
86.22%HIGH Exploitation Risk
99th percentile
This vulnerability has a 86.22% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.
CWE Classification
NVD-CWE-Other