CVE-2005-0095

CVE-2005-0095 describes a denial-of-service vulnerability in Squid 2.5.STABLE7 and earlier, stemming from improper parsing of malformed WCCP messages. Attackers can exploit this by sending specially crafted WCCP messages with spoofed source addresses and invalid cache numbers, causing the Squid proxy server to crash. Rated with a CVSS score of 5.0, this vulnerability is easily exploitable over the network without authentication (AV:N/AC:L/Au:N), leading to a partial denial of service (A:P). Its high EPSS score of 0.758 and FAUCET Risk Score of 98/100 indicate a significant likelihood of exploitation. While there is no known public exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered substantial community attention with 10 mentions, suggesting ongoing discussion or interest. However, there is no indication of active exploitation or media coverage.