CVE-2005-0173: squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access...

Security readout for executives and security teams

This is an old Squid proxy authentication flaw. In affected deployments, an authenticated user could bypass username-based proxy access rules because LDAP ignored spaces around the username while Squid ACL matching did not handle them correctly. Exposure is likely limited to legacy Squid 2.5 or earlier installations using squid_ldap_auth with LDAP-backed authentication and username-based ACL restrictions. Modern or non-LDAP Squid deployments are not shown as affected by the provided sources. Treat this as a targeted legacy-platform risk. Prioritize remediation where old Squid proxies enforce business-critical access restrictions through LDAP usernames, especially if the proxy gates internal systems or sensitive egress paths. Mitigation focus: Identify any Squid 2.5 or earlier systems using squid_ldap_auth.; Apply the relevant vendor security update or Squid ldap_spaces patch.; Review vendor advisories for distribution-specific package names and fixed versions..

Prepared

Jun 30, 2026, 01:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.