Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2005-0173
7.5
HIGHCVSS v2
Published
May 2, 2005
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.
squid-cache/squid
GitHubSquid Web Proxy Cache - Source Code
GitHubSquid Web Proxy Cache - Source Code= 2.3.stable3, = 2.2.stable2, = 2.2.stable3, = 2.0.patch2, = 2.1.patch2, = 2.5.stable5, = 2.2.stable4, = 2.0.patch1, = 2.1.patch1, = 2.2.stable1, = 2.3.stable2, = 2.4.stable7, = 2.1.release, = 2.4.stable1, = 2.5.stable3, = 2.5.stable4, = 2.0.release, = 2.2.devel4, = 2.3.devel3, = 2.3.stable1, = 2.4.stable4, = 2.5.stable6, = 2.1.pre3, = 2.1.pre4, = 2.3.stable4, = 2.5.stable1, = 2.5.stable2, = 2.1.pre1, = 2.2.pre2, = 2.4.stable6, = 2.0.pre1, = 2.2.devel3, = 2.2.stable5, = 2.4.stable2, = 2.2.pre1, = 2.3.devel2, = 2.4.stable3, = 2.3.stable5NVD