Lucene search

K
freebsdFreeBSDA30E5E44-5440-11D9-9E1E-C296AC722CB3
HistoryDec 21, 2004 - 12:00 a.m.

squid -- confusing results on empty acl declarations

2004-12-2100:00:00
vuxml.freebsd.org
13

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

82.7%

Applying an empty ACL list results in unexpected behavior:
anything will match an empty ACL list. For example,

The meaning of the configuration gets very confusing when
we encounter empty ACLs such as
acl something src “/path/to/empty_file.txt”
http_access allow something somewhere
gets parsed (with warnings) as
http_access allow somewhere
And similarily if you are using proxy_auth acls without
having any auth schemes defined.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchsquid< 2.5.7_5UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

82.7%

Related for A30E5E44-5440-11D9-9E1E-C296AC722CB3