Hoʻokumu ʻia ka pilikia e kahi bug i ka mea hoʻohana hōʻoia hōʻoia HTTP Basic a hiki i ka hoʻoulu ʻana i ka buffer overflow i ka wā e hele ai i nā hōʻoia i hana ʻia i ka wā e komo ai i ka Squid Cache
Luna mana a i ʻole puka puka FTP i kūkulu ʻia. ʻIke ʻia ka nāwaliwali e hoʻomaka me ka hoʻokuʻu ʻana o Squid 4.0.23. Ma ke ʻano he hana no ka pale ʻana i ka nāwaliwali, hiki iā ʻoe ke kūkulu hou i ka squid me ke koho "--disable-auth-basic" a i ʻole e hoʻopau i ke komo ʻana i nā lawelawe e hoʻohana ana i ka hōʻoia HTTP i ka hoʻonohonoho:
acl FTP proto FTP
Hōʻole ʻo http_access iā FTP
http_access hoole luna
Hiki i nā haʻahaʻa ʻekolu ʻē aʻe ke alakaʻi i ka hōʻole ʻana i ka lawelawe i ka wā e hoʻopunipuni ai i cachemgr.cgi, HTTP Digest a i ʻole HTTP Basic authentication. ʻO ke koena o ka nāwaliwali e ʻae i ka hoʻopaʻa ʻana i ka paena ma o cachemgr.cgi.
Source: opennet.ru