Published: 02/05/2005 Updated: 11/10/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Squid 2.5.STABLE9 and previous versions does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator.

Vulnerable Product	Search on Vulmon	Subscribe to Product
squid squid 2.5.stable6
squid squid 2.5.stable7
squid squid 2.5.stable1
squid squid 2.5.stable2
squid squid 2.5.stable3
squid squid 2.5.stable4
squid squid 2.5.stable5
squid squid 2.5.stable8
squid squid 2.5.stable9

Synopsis squid security update Type/Severity Security Advisory: Low Topic An updated squid package that fixes several security issues is now availableThis update has been rated as having low security impact by the Red HatSecurity Response Team Description Squid is a full-featured Web prox ...

Michael Bhola discovered that errors in the http_access configuration, in particular missing or invalid ACLs, did not cause a fatal error This could lead to wider access permissions than intended by the administrator ...

Michael Bhola discovered a bug in Squid, the popular WWW proxy cache Squid does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator For the stable distribution (woody) this problem has been fixed in version 246-2woody8 ...

NVD-CWE-Other http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-acl_error http://www.squid-cache.org/bugs/show_bug.cgi?id=1255 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000948 http://www.debian.org/security/2005/dsa-721 http://www.redhat.com/support/errata/RHSA-2005-415.html http://fedoranews.org/updates/FEDORA--.shtml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10513 https://access.redhat.com/errata/RHSA-2005:415 https://usn.ubuntu.com/122-1/https://nvd.nist.gov

CVE-2005-1345

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect