CVE-2005-0626 Race condition in n/a

What is CVE-2005-0626?

CVE-2005-0626 is a low-severity vulnerability in n/a, published on 3 Mar 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies.

Which versions are affected by CVE-2005-0626?

It affects 1 product.

Products include Squid Squid.

How do I fix CVE-2005-0626?

Upgrade to a fixed version.

Is CVE-2005-0626 being exploited?

There is no known exploitation of CVE-2005-0626 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2005-0194 Auth bypass in n/a Critical 10.0
• CVE-2005-1345 Missing authorization in n/a High 7.5
• CVE-2005-0173 Auth bypass in n/a High 7.5
• CVE-2004-0189 Security feature bypass in n/a High 7.5
• CVE-2002-0163 Memory corruption in n/a High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2005-0626, GHSA-h49j-p65c-g4qj.