CVE-2005-0175: Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.

Security readout for executives and security teams

This flaw affects very old Squid 2.5 proxy caches through 2.5.STABLE7. A remote attacker could manipulate HTTP response handling so the proxy stores malicious or incorrect content, then serves it to users. Business risk depends on whether any legacy Squid proxy still handles shared browsing or application traffic. Exposure is most likely in legacy Squid 2.5 deployments, old Linux distributions, embedded appliances, or forgotten proxy infrastructure. Modern environments are unlikely affected unless they retain unsupported proxy packages. Treat as a legacy exposure hunt. It is not a current KEV-listed emergency, but any affected shared proxy could undermine user trust and application integrity. Mitigation focus: Identify and remove Squid 2.5 through 2.5.STABLE7 deployments.; Apply Squid or operating-system vendor updates for CVE-2005-0175.; Decommission unsupported proxy appliances or rebuild them on supported software..

Prepared

Jun 30, 2026, 01:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.