Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Squid代理超大HTTP头未指定的远程漏洞
Vulnerability Description
Squid 是一个流行的自由软件(GNU通用公共许可证)的代理服务器和Web缓存服务器。 Squid 2.5到2.5.STABLE7可让远程攻击者通过不符合HTTP规范的头使高速缓存中毒或执行特定的攻击,这些不符合规范的头包括(1)多个Content-Length头,(2)不属于CRLF对的回车(CR)符,以及(3)包含空格字符的头名称。
CVSS Information
N/A
Vulnerability Type
N/A