| Vulnerability Name: | CVE-1999-1481 (CCN-3433) | ||||||||
| Assigned: | 1999-10-28 | ||||||||
| Published: | 1999-10-28 | ||||||||
| Updated: | 2017-10-10 | ||||||||
| Summary: | Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair. | ||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
| ||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Bypass Security | ||||||||
| References: | Source: CCN Type: BugTraq Mailing List, Mon, 25 Oct 1999 20:30:36 +0200 [squid] external authentication security issue Source: MITRE Type: CNA CVE-1999-1481 Source: CCN Type: OSVDB ID: 1125 Squid Web Proxy Newline Cross-User Authentication Bypass Source: BUGTRAQ Type: UNKNOWN 19991103 [squid]exploit for external authentication problem Source: BID Type: Exploit, Patch, Vendor Advisory 741 Source: CCN Type: BID-741 Squid Web Proxy Authentication Failure Vulnerability Source: CONFIRM Type: Patch, Vendor Advisory http://www.squid-cache.org/Versions/v2/2.2/bugs/ Source: CCN Type: Squid Web Proxy Cache Web site squid-2.2.stable5-newlines_in_auth.patch Source: XF Type: UNKNOWN squid-proxy-auth-access(3433) Source: XF Type: UNKNOWN squid-proxy-auth-access(3433) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||