CVE-2005-0174: Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via head...

Security readout for executives and security teams

This old Squid proxy flaw could let a remote attacker confuse HTTP header parsing and poison cached content. Business impact depends on whether legacy Squid 2.5 through 2.5.STABLE7 still exists in the environment, especially where proxies serve shared users or public traffic. Exposure is most likely in legacy Squid 2.5 proxy installations or old Linux distribution packages referenced by the advisories. Environments without Squid, or running maintained Squid versions, are not indicated as affected by the provided sources. Treat this as a legacy exposure cleanup item unless affected Squid proxies are still active. Prioritize faster if any affected proxy handles shared, external, or security-sensitive traffic. Mitigation focus: Inventory proxy servers for Squid 2.5 through 2.5.STABLE7.; Apply Squid or distribution vendor updates from the cited advisories.; Retire unsupported Squid 2.5 deployments where upgrades are not practical..

Prepared

Jun 30, 2026, 01:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.