Race condition vulnerability in Squid 2.5.STABLE7 to 2.5.STABLE9 allows cookie theft

Race condition vulnerability in Squid 2.5.STABLE7 to 2.5.STABLE9 allows cookie theft

CVE-2005-0626 · LOW Severity

AV:N/AC:H/AU:N/C:P/I:N/A:N

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies.

Learn more about our User Device Pen Test.