Is CVE-2005-0094 actively exploited?

CVE-2005-0094 has no public evidence of in-the-wild exploitation as of 2025-04-03.

What is the CVSS score for CVE-2005-0094?

CVE-2005-0094 has a CVSS score of 5 (UNKNOWN severity). Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P.

How do I patch CVE-2005-0094?

Patch guidance is available from squid security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2005-0094.

CVE-2005-0094 - remediation guidance & executive summary

Q: Which products are affected by CVE-2005-0094?

27 products: squid squid, squid squid, squid squid, squid squid, squid squid, and 22 more.

Description

Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.

CVSS Metrics

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Access Vector: network
Access Cmplx: low
Auth: none
Confidentiality: none
Integrity: none
Availability: partial
Weaknesses: NVD-CWE-Other

Metadata

Primary Vendor: SQUID
Published: 1/15/2005
Last Modified: 4/3/2025
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

squid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squidsquid : squid

Remediation Guidance

Executive Summary

View on NIST NVD