CVE-1999-1481

Medium

Published: 31/12/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

3.57%

88th percentile - higher than 88% of all known CVEs

Summary

Squid version 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair.

Risk Assessment

Organizations may be exposed to unauthorized access to resources, potentially leading to data breaches or other serious security incidents.

Recommendation

It is recommended to upgrade to a newer version of Squid that is not vulnerable to this issue and to implement additional access control mechanisms.

Original NVD description (English source)

Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair.