CVE-2005-0626
EPSS 0.09%Published: 3/8/2005Modified: 4/28/2026
Description
Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies.
Affected packages (1)
- Debian/squidfrom 0, < 2.5.9-2