NVD

Id
65958  
Name
CVE-2005-0194  
Description
Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote attackers to bypass intended ACLs if the administrator ignores the parser warnings.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2005-05-02  
Modified Date
2016-10-17  
Seq
2005-0194  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
343619 65958 CVE-2005-0194 CLA-2005:923  View
343620 65958 CVE-2005-0194 FLSA-2006:152809  View
343621 65958 CVE-2005-0194 20050221 [USN-84-1] Squid vulnerabilities  View
343622 65958 CVE-2005-0194 DSA-667  View
343623 65958 CVE-2005-0194 VU#260421  View
343624 65958 CVE-2005-0194 http://www.squid-cache.org/bugs/show_bug.cgi?id=1166  View
343625 65958 CVE-2005-0194 http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-empty_acls  View
343626 65958 CVE-2005-0194 http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-empty_acls.patch  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63235 JVNDB-2004-000577 Squid における ACL の定義不備によるアクセス制御回避の脆弱性 Squid 以前では、空の ACL が定義された場合に、管理者が意図するものとは異なるアクセス制御の設定が反映されてしまう脆弱性が存在します。 CVE-2005-0194 11398 CVE-2005-0194 65958 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000577.html 2004-12-21 2007-04-01 View