CVE-2005-0173

squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at…

published February 6, 2005

CVSS
—
EPSS
32%
Percentile
98.3
In the wild
Unconfirmed
What it is

squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.31942 · 98.3th percentile
Published
2005-02-06T05:00Z
EPSS history
Timeline
  • 06 FEB 05:00Z
    squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at…
    cvelistv5