CVE-2005-0173
Fixed in a distro release EPSS 32%
squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.
Products: squid
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | squid | 2.5.7-4 |
| Debian 13 | squid | 2.5.7-4 |
| Debian 14 | squid | 2.5.7-4 |
| Debian 3.0 | squid | 2.4.6-2woody6 |
| Red Hat Enterprise Linux 3 | squid | 7:2.5.STABLE3-6.3E.7 |
| Red Hat Enterprise Linux 3 | squid-debuginfo | 7:2.5.STABLE3-6.3E.7 |
| Red Hat Enterprise Linux 4 | squid | 7:2.5.STABLE6-3.4E.3 |
| Red Hat Enterprise Linux 4 | squid-debuginfo | 7:2.5.STABLE6-3.4E.3 |