CVE-2005-0173

security flaw

Published Feb 6, 2005 CVSS 2.0 · 7.5 High EPSS 31.9% KEV · Not listed
Description
squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2005-0174 squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.
Ubuntu USN Ubuntu USN USN-77-1 Squid vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 9:05 PM
Reserved
Jan 27, 2005, 12:00 AM
Status
Modified
Published
May 2, 2005, 4:00 AM
Modified
Jun 16, 2026, 10:10 PM
Severity
Public date
Jan 10, 2005, 12:00 AM