Cloudanix VulnDB

CVE-2005-0173

None

CVSS

—

EPSS

31.9%

Published

May 2, 2005

CISA due date

—

The record

squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 squid 0 2.5.7-4
Debian:12 squid 0 2.5.7-4
Debian:13 squid 0 2.5.7-4
Debian:3.0 squid 0 2.4.6-2woody6
Red Hat:enterprise_linux:3::as squid 0 7:2.5.STABLE3-6.3E.7
Red Hat:enterprise_linux:3::as squid-debuginfo 0 7:2.5.STABLE3-6.3E.7
Red Hat:enterprise_linux:3::desktop squid 0 7:2.5.STABLE3-6.3E.7
Red Hat:enterprise_linux:3::desktop squid-debuginfo 0 7:2.5.STABLE3-6.3E.7
Red Hat:enterprise_linux:3::es squid 0 7:2.5.STABLE3-6.3E.7
Red Hat:enterprise_linux:3::es squid-debuginfo 0 7:2.5.STABLE3-6.3E.7
Red Hat:enterprise_linux:3::ws squid 0 7:2.5.STABLE3-6.3E.7
Red Hat:enterprise_linux:3::ws squid-debuginfo 0 7:2.5.STABLE3-6.3E.7
Red Hat:enterprise_linux:4::as squid 0 7:2.5.STABLE6-3.4E.3
Red Hat:enterprise_linux:4::as squid-debuginfo 0 7:2.5.STABLE6-3.4E.3
Red Hat:enterprise_linux:4::desktop squid 0 7:2.5.STABLE6-3.4E.3
Red Hat:enterprise_linux:4::desktop squid-debuginfo 0 7:2.5.STABLE6-3.4E.3
Red Hat:enterprise_linux:4::es squid 0 7:2.5.STABLE6-3.4E.3
Red Hat:enterprise_linux:4::es squid-debuginfo 0 7:2.5.STABLE6-3.4E.3
Red Hat:enterprise_linux:4::ws squid 0 7:2.5.STABLE6-3.4E.3
Red Hat:enterprise_linux:4::ws squid-debuginfo 0 7:2.5.STABLE6-3.4E.3

Related vulnerabilities