Squid ACLs May Be Confusing When Empty Lists are Declared
Categorie: Vulnerability Posted: 2004-12-27 by ReCall Views: 531 Source: Click here
Current Rating: Not rated
Details
Description: A security issue was reported in the Squid proxy caching server. An administrator may be confused about the meaning of access controls in certain cases.
If any empty access control lists are declared, the system may implement an access control configuration that the administrator does not expect.
For example, the following lines will be parsed as "http_access allow somewhere":
