What’s Vulnerable › Vulnerabilities

CVE-2005-2917

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-09-30 · updated 2026-06-16

Description

Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service (daemon restart).

Affected products

• Squid: through 2.5.stable10; 2.5.9

References

• http://fedoranews.org/updates/FEDORA--.shtml
• http://secunia.com/advisories/16992
• http://secunia.com/advisories/17015
• http://secunia.com/advisories/17050
• http://secunia.com/advisories/17177
• http://secunia.com/advisories/19161
• http://secunia.com/advisories/19532
• http://securitytracker.com/id?1014920
• http://www.debian.org/security/2005/dsa-828
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:181

Get alerted when CVE-2005-2917 or the next vulnerability affects your stack