Description
Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://fedoranews.org/updates/FEDORA--.shtml ↗
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000948 ↗
- http://www.squid-cache.org/bugs/show_bug.cgi?id=1255 ↗
- http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-acl_error ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10513 ↗
- http://www.redhat.com/support/errata/RHSA-2005-415.html ↗
- http://www.debian.org/security/2005/dsa-721 ↗