CVE-2005-1345: High severity Squid Squid vulnerability
Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the httpaccess configuration, which could lead to less restrictive ACLs than intended by the administrator.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1345?
CVE-2005-1345 is classified as a medium severity vulnerability due to misconfigured access control lists that can lead to unintended access permissions.
How do I fix CVE-2005-1345?
To fix CVE-2005-1345, ensure that your http_access configuration includes valid ACL rules and update to a version of Squid later than 2.5.STABLE9.
Which versions of Squid are affected by CVE-2005-1345?
CVE-2005-1345 affects Squid versions 2.5.STABLE1 through 2.5.STABLE9.
What risks are associated with CVE-2005-1345?
The risks of CVE-2005-1345 include potential unauthorized access to resources due to ineffective access control.
Can CVE-2005-1345 be exploited remotely?
Yes, CVE-2005-1345 can be exploited remotely as it involves the misconfiguration of access controls in the Squid proxy server.