CVE-2005-0173
published 2005-05-02CVE-2005-0173: squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at…
PriorityP347high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
31.94%
98.1th percentile
squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.
Affected
43 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | squid | < squid 2.5.7-4 (bookworm) | squid 2.5.7-4 (bookworm) |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-2r4j-x5mr-ch9c: squid_ldap_auth in Squid 2
ghsa_unreviewed·2022-05-01
CVE-2005-0173 [HIGH] GHSA-2r4j-x5mr-ch9c: squid_ldap_auth in Squid 2
squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.
OSV
CVE-2005-0173: squid_ldap_auth in Squid 2
osv·2005-05-02·CVSS 7.5
CVE-2005-0173 [HIGH] CVE-2005-0173: squid_ldap_auth in Squid 2
squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.
Ubuntu
Squid vulnerabilities
vendor_ubuntu·2005-02-08
CVE-2005-0173 Squid vulnerabilities
Title: Squid vulnerabilities
Summary: Squid vulnerabilities
A possible authentication bypass was discovered in the LDAP
authentication backend. LDAP ignores leading and trailing whitespace
in search filters. This could possibly be abused to bypass explicit
access controls or confuse accounting when using several variants of
the login name. (CAN-2005-0173)
Previous Squid versions were not strict enough while parsing HTTP
requests and responses. Various violations of the HTTP protocol, such
as multiple Content-Length header lines, invalid "Carriage Return"
characters, and HTTP header names containing whitespace, led to cache
pollution and could possibly be exploited to deliver wrong content to
clients. (CAN-2005-0174)
Squid was susceptible to a cache poisoning attack called "HTTP
respons
Red Hat
security flaw
vendor_redhat·2005-01-10·CVSS 7.5
CVE-2005-0173 [HIGH] security flaw
security flaw
squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.
Debian
CVE-2005-0173: squid - squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to by...
vendor_debian·2005·CVSS 7.5
CVE-2005-0173 [HIGH] CVE-2005-0173: squid - squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to by...
squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.
Scope: local
bookworm: resolved (fixed in 2.5.7-4)
bullseye: resolved (fixed in 2.5.7-4)
forky: resolved (fixed in 2.5.7-4)
sid: resolved (fixed in 2.5.7-4)
trixie: resolved (fixed in 2.5.7-4)
No detection rules found.
No public exploits indexed.
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923http://fedoranews.org/updates/FEDORA--.shtmlhttp://marc.info/?l=bugtraq&m=110780531820947&w=2http://www.debian.org/security/2005/dsa-667http://www.kb.cert.org/vuls/id/924198http://www.mandriva.com/security/advisories?name=MDKSA-2005:034http://www.novell.com/linux/security/advisories/2005_06_squid.htmlhttp://www.redhat.com/support/errata/RHSA-2005-060.htmlhttp://www.redhat.com/support/errata/RHSA-2005-061.htmlhttp://www.securityfocus.com/bid/12431http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-ldap_spaceshttp://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-ldap_spaces.patchhttp://www.squid-cache.org/bugs/show_bug.cgi?id=1187https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10251http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923http://fedoranews.org/updates/FEDORA--.shtmlhttp://marc.info/?l=bugtraq&m=110780531820947&w=2http://www.debian.org/security/2005/dsa-667http://www.kb.cert.org/vuls/id/924198http://www.mandriva.com/security/advisories?name=MDKSA-2005:034http://www.novell.com/linux/security/advisories/2005_06_squid.htmlhttp://www.redhat.com/support/errata/RHSA-2005-060.htmlhttp://www.redhat.com/support/errata/RHSA-2005-061.htmlhttp://www.securityfocus.com/bid/12431http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-ldap_spaceshttp://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-ldap_spaces.patchhttp://www.squid-cache.org/bugs/show_bug.cgi?id=1187https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10251
2005-05-02
Published