CVE-2005-0626

Published: 8 March 2005

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies.

Status

References

• https://ubuntu.com/security/notices/USN-93-1
• https://www.cve.org/CVERecord?id=CVE-2005-0626
• NVD
• Launchpad
• Debian