29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests

A heap over-read in the Squid web proxy can leak another user's cleartext HTTP request, including any credentials or session tokens it carries, to anyone already allowed to send traffic through the same proxy. The bug traces to a 1997 FTP-parsing change and is still live in Squid's default configura

Related Stories

CISA urges device hardening after thousands of Fortinet credentials compromised

📰

Webshells Remain Popular, (Mon, Jun 22nd)

📰

A Glimpse into the “Search Your Target” Market for Stolen Credentials

Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries