CVE-2005-0095: The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of...

Security readout for executives and security teams

CVE-2005-0095 is an old Squid proxy availability flaw. A malformed WCCP control message could crash affected Squid versions, interrupting proxy service. The sources identify Squid 2.5.STABLE7 and earlier; they do not describe data theft or code execution. Exposure is most likely in legacy systems running Squid 2.5.STABLE7 or earlier, especially where WCCP is enabled and reachable from untrusted networks. Modern maintained packages are unlikely to remain vulnerable, but old appliances or frozen distributions should be checked. Treat this as a legacy availability risk. Prioritize remediation where Squid is business-critical, internet-adjacent, or part of routing/cache infrastructure. For unsupported systems, the larger concern is obsolete platform exposure, not this CVE alone. Mitigation focus: Upgrade Squid using applicable vendor security advisories or maintained distribution packages.; Apply the referenced Squid WCCP denial-of-service patch if source-built.; Disable WCCP if it is not operationally required..

Prepared

Jun 30, 2026, 01:38 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.