Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2005-0173
HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0173

2005-05-0204:00:00
[email protected]
web.nvd.nist.gov
42
cve-2005-0173
squid_ldap_auth
acl bypass
ldap
remote authentication

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

5.9 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.4%

JSON

squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.

Affected configurations

NVD
Node
squidsquidMatch2.0.patch1
OR
squidsquidMatch2.0.patch2
OR
squidsquidMatch2.0.pre1
OR
squidsquidMatch2.0.release
OR
squidsquidMatch2.1.patch1
OR
squidsquidMatch2.1.patch2
OR
squidsquidMatch2.1.pre1
OR
squidsquidMatch2.1.pre3
OR
squidsquidMatch2.1.pre4
OR
squidsquidMatch2.1.release
OR
squidsquidMatch2.2.devel3
OR
squidsquidMatch2.2.devel4
OR
squidsquidMatch2.2.pre1
OR
squidsquidMatch2.2.pre2
OR
squidsquidMatch2.2.stable1
OR
squidsquidMatch2.2.stable2
OR
squidsquidMatch2.2.stable3
OR
squidsquidMatch2.2.stable4
OR
squidsquidMatch2.2.stable5
OR
squidsquidMatch2.3.devel2
OR
squidsquidMatch2.3.devel3
OR
squidsquidMatch2.3.stable1
OR
squidsquidMatch2.3.stable2
OR
squidsquidMatch2.3.stable3
OR
squidsquidMatch2.3.stable4
OR
squidsquidMatch2.3.stable5
OR
squidsquidMatch2.4.stable1
OR
squidsquidMatch2.4.stable2
OR
squidsquidMatch2.4.stable3
OR
squidsquidMatch2.4.stable4
OR
squidsquidMatch2.4.stable6
OR
squidsquidMatch2.4.stable7
OR
squidsquidMatch2.5.stable1
OR
squidsquidMatch2.5.stable2
OR
squidsquidMatch2.5.stable3
OR
squidsquidMatch2.5.stable4
OR
squidsquidMatch2.5.stable5
OR
squidsquidMatch2.5.stable6

Related

nvd 1
nessus 9
cert 1
debiancve 1
ubuntucve 1
freebsd 1
openvas 7
cvelist 1
debian 2
ubuntu 1
osv 1
gentoo 1
suse 1
redhat 2
nvd
nvd
CVE-2005-0173
2005-05-02 04:00:00
nessus
nessus
FreeBSD : squid -- no sanity check of usernames in squid_ldap_auth (7a921e9e-68b1-11d9-9e1e-c296ac722cb3)
2005-07-13 00:00:00
Ubuntu 4.10 : squid vulnerabilities (USN-77-1)
2006-01-15 00:00:00
Mandrake Linux Security Advisory : squid (MDKSA-2005:034)
2005-02-11 00:00:00
cert
cert
Squid LDAP authentication routines fail to check for invalid input
2005-02-04 00:00:00
debiancve
debiancve
CVE-2005-0173
2005-05-02 04:00:00
ubuntucve
ubuntucve
CVE-2005-0173
2005-05-02 00:00:00
freebsd
freebsd
squid -- no sanity check of usernames in squid_ldap_auth
2005-01-10 00:00:00
openvas
openvas
FreeBSD Ports: squid
2008-09-04 00:00:00
FreeBSD Ports: squid
2008-09-04 00:00:00
Ubuntu: Security Advisory (USN-77-1)
2022-08-26 00:00:00
cvelist
cvelist
CVE-2005-0173
2005-02-06 05:00:00
debian
debian
[SECURITY] [DSA 667-1] New squid packages fix several vulnerabilities
2005-02-04 16:35:59
[SECURITY] [DSA 667-1] New squid packages fix several vulnerabilities
2005-02-04 16:35:59
ubuntu
ubuntu
Squid vulnerabilities
2005-02-08 00:00:00
osv
osv
squid - several
2005-02-04 00:00:00
gentoo
gentoo
Squid: Multiple vulnerabilities
2005-02-02 00:00:00
suse
suse
remote command execution in squid
2005-02-10 15:13:39
redhat
redhat
(RHSA-2005:060) squid security update
2005-02-15 00:00:00
(RHSA-2005:061) squid security update
2005-02-11 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

5.9 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.4%

JSON
Related for CVE-2005-0173
nvd1nessus9cert1debiancve1ubuntucve1freebsd1openvas7cvelist1debian2ubuntu1osv1gentoo1suse1redhat2