CVE-2005-1345
Fixed in a distro release EPSS 2%
Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator.
Products: squid
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | squid | 2.5.9-7 |
| Debian 13 | squid | 2.5.9-7 |
| Debian 14 | squid | 2.5.9-7 |
| Debian 3.0 | squid | 2.4.6-2woody8 |
| Red Hat Enterprise Linux 3 | squid | 7:2.5.STABLE3-6.3E.13 |
| Red Hat Enterprise Linux 3 | squid-debuginfo | 7:2.5.STABLE3-6.3E.13 |
| Red Hat Enterprise Linux 4 | squid | 7:2.5.STABLE6-3.4E.9 |
| Red Hat Enterprise Linux 4 | squid-debuginfo | 7:2.5.STABLE6-3.4E.9 |