CVE-2009-3305

CVE-2009-3305 describes a denial-of-service vulnerability in Polipo 1.0.4, and potentially other versions, affecting the pps.jussieu polipo product. A remote attacker can trigger a segmentation fault and crash the proxy server by sending a crafted HTTP request with a Cache-Control header missing a max-age value. This vulnerability has a CVSS score of 5.0, indicating a medium severity, and is easily exploitable over the network with low attack complexity and no authentication required, leading to a partial availability impact. While not listed on the KEV catalog, a Proof-of-Concept exploit is available on ExploitDB, though there is no evidence of active exploitation, and it has received minimal community discussion or media coverage.