Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote attackers to bypass intended access restrictions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Squid HTCP支持选项无法动态调整漏洞
Vulnerability Description
Squid是一个运行于Linux/Unix系统下的Web服务代理程序，它提供了对超文本缓冲协议的支持(Hyper Text Caching Protocol)，HTCP在RFC2756中有定义，用于提供对缓存的管理。在大多数默认安装情况下，这个支持选项是关闭的，但在编译时指定'--enable-htcp'选项则可以打开此缓冲功能的支持。 Squid实现上存在一个问题，使Squid的使用者无法在程序运行时配置HTCP支持选项的打开和关闭。 虽然在Squid的文档中说明了对HTCP的是否支持可以在Squid的
CVSS Information
N/A
Vulnerability Type
N/A