Vulnerability in National Science Foundation Squid Web Proxy
CVE-1999-1481
Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair.
EPSS: 0.036 (88.2th percentile) — read the EPSS interpretation.
Affected products
- National_science_foundation Squid_web_proxy — versions 1.0, 1.0novm, 1.1
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)