CVE-2005-0194

Description

Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote attackers to bypass intended ACLs if the administrator ignores the parser warnings.

Primary references

• cve@mitre.org — Patch
• cve@mitre.org
• cve@mitre.org
• cve@mitre.org — Patch, Vendor Advisory
• cve@mitre.org — Patch, Third Party Advisory, US Government Resource
• cve@mitre.org — Patch
• cve@mitre.org — Patch
• cve@mitre.org — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Patch
• af854a3a-2127-422b-91ae-364da2661108
• af854a3a-2127-422b-91ae-364da2661108
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory