关于 CVE-2005-0241 的漏洞信息

1. 漏洞描述
From NVD
The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size.
From 神龙GPT (AIGC)
在Squid 2.5-STABLE7 和更早版本中的http.c中的httpProcessReplyHeader函数在处理“过大”的HTTP响应头时,未能正确设置调试上下文,这可能导致远程攻击者 poison 缓存或绕过基于头大小的限制访问控制。
2. 漏洞评分(CVSS)
From NVD
NVD 暂无评分
From 神龙GPT (AIGC)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
3. 漏洞类别
From NVD
NVD 暂无漏洞类别信息
From 神龙GPT (AIGC)
神龙GPT 暂无漏洞类别信息(请耐心等待)
Reference