squid: security bypass
| Package(s): | squid3 | CVE #(s): | CVE-2015-5400 | ||||||||||||||||||||||||||||||||
| Created: | July 30, 2015 | Updated: | September 9, 2015 | ||||||||||||||||||||||||||||||||
| Description: | From the Debian LTS advisory:
Alex Rousskov discovered that Squid configured with cache_peer and operating on explicit proxy traffic does not correctly handle CONNECT method peer responses. In some configurations, it allows remote clients to bypass security in an explicit gateway proxy. | ||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||