CVE-2005-0094

Name: CVE-2005-0094
Creator: NVD / NIST
Published: 2005-01-15T05:00:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 8.63%

Last modified Jun 16, 2026

CVE-2005-0094 is a vulnerability of currently unknown severity. Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.. EPSS estimates a 8.63% chance of exploitation in the next 30 days.

Description

Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.

Metrics

EPSS Probability

8.63%

94.4th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Squid	Squid	2.0_patch2
Squid	Squid	2.1_patch2
Squid	Squid	2.3_.stable4
Squid	Squid	2.3_.stable5
Squid	Squid	2.3_stable5
Squid	Squid	2.4
Squid	Squid	2.4_.stable2
Squid	Squid	2.4_.stable6
Squid	Squid	2.4_.stable7
Squid	Squid	2.4_stable7
Squid	Squid	2.5.6
Squid	Squid	2.5.stable1
Squid	Squid	2.5.stable2
Squid	Squid	2.5.stable3
Squid	Squid	2.5.stable4
Squid	Squid	2.5.stable5
Squid	Squid	2.5.stable6
Squid	Squid	2.5.stable7
Squid	Squid	2.5_.stable1
Squid	Squid	2.5_.stable3
Squid	Squid	2.5_.stable4
Squid	Squid	2.5_.stable5
Squid	Squid	2.5_.stable6
Squid	Squid	2.5_stable3
Squid	Squid	2.5_stable4
Squid	Squid	2.5_stable9
Squid	Squid	2.6.stable1

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923Vendor Advisory
http://fedoranews.org/updates/FEDORA--.shtml
http://secunia.com/advisories/13825Patch, Vendor Advisory
http://security.gentoo.org/glsa/glsa-200501-25.xmlPatch, Vendor Advisory
http://www.debian.org/security/2005/dsa-651Patch, Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:014
http://www.novell.com/linux/security/advisories/2005_06_squid.htmlVendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-060.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-061.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/12276
http://www.squid-cache.org/Advisories/SQUID-2005_1.txtExploit, Vendor Advisory
http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-gopher_html_parsing.patchVendor Advisory
http://www.trustix.org/errata/2005/0003/Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11146
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923Vendor Advisory
http://fedoranews.org/updates/FEDORA--.shtml
http://secunia.com/advisories/13825Patch, Vendor Advisory
http://security.gentoo.org/glsa/glsa-200501-25.xmlPatch, Vendor Advisory
http://www.debian.org/security/2005/dsa-651Patch, Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:014
http://www.novell.com/linux/security/advisories/2005_06_squid.htmlVendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-060.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-061.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/12276
http://www.squid-cache.org/Advisories/SQUID-2005_1.txtExploit, Vendor Advisory
http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-gopher_html_parsing.patchVendor Advisory
http://www.trustix.org/errata/2005/0003/Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11146

Timeline

Published: Jan 15, 2005
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2005-0094?

How severe is CVE-2005-0094?

Severity scoring for CVE-2005-0094 is pending analysis. The EPSS model estimates a 8.63% probability of exploitation in the next 30 days.

How do I fix CVE-2005-0094?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2005-0094?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST