ืงืขืจืขืงืืืื ืคึผืจืึทืงืกื ืืขืืืื ื , ืืืึธืก ืคืึทืจืคืขืกืืืงื 5 ืืืึทืื ืขืจืึทืืืืืืื. ืืืื ืืืึทืื ืขืจืึทืืืืืื (CVE-2019-12527) ืคึผืึทืืขื ืืฉืึทืื ืึธืจืืึทื ืืืืจื ืงืึธื ืืืจืืคืืจืื ื ืืื ืื ืจืขืื ืคืื ืื ืกืขืจืืืขืจ ืคึผืจืึธืฆืขืก.
ืื ืึทืจืืืกืืขืื ืืื ืืขืคึฟืืจื ืืืจื ืึท ืืฉืืง ืืื ืื ืืืืคึผ ืืึทืกืืง ืึธืืขื ืืึทืงืืืฉืึทื ืืึทื ืืืขืจ ืืื ืึทืืึทืื ืึท ืืึทืคืขืจ ืึธืืืืขืจืคืืึธื ืฆื ืืืื ืืจืืืขืจื ืืืขื ืืืจืืืขืืื ืืขื ืกืคึผืขืฆืืขื ืงืจืึทืคืืขื ืงืจืึทืืขื ืืฉืึทืื ืืืขื ืึทืงืกืขืกืื ื ืกืงืืืื ืงืึทืฉ
ืคืึทืจืืืึทืืืขืจ ืึธืืขืจ ืึท ืืขืืืื-ืืื ืคืืคึผ ืืืืืืืื. ืื ืืืึทืื ืขืจืึทืืืืืื ืืื ืกืืึทืจืืื ื ืืื ืื ืืขืืืื ื ืคืื Squid 4.0.23. ืืื ืึท ืืืึธืจืงืึทืจืึธืื ื ืคึฟืึทืจ ืืืึทืงืื ื ืื ืืืึทืื ืขืจืึทืืืืืื, ืืืจ ืงืขื ืขื ืจืืืืื ืืื ืืคืืฉ ืืื ืื "--disable-auth-basic" ืึธืคึผืฆืืข ืึธืืขืจ ืืืกืืืืึทื ืึทืงืกืขืก ืฆื ืืึทืืื ืื ืืก ืืืึธืก ื ืืฆื HTTP ืึธืืขื ืืึทืงืืืฉืึทื ืืื ืื ืงืึทื ืคืืืืขืจืืืฉืึทื:
ืึทืงื ืคืืคึผ ืคึผืจืึธืืึธ ืคืืคึผ
ืืืืคึผ_ืึทืงืกืขืก ืืืืงืขื ืขื ืคืืคึผ
ืืืืคึผ_ืึทืงืกืขืก ืืืืงืขื ืขื ืคืึทืจืืืึทืืืขืจ
ืื ืื ืืขืจืข ืืจืื ืืืึทืื ืขืจืึทืืืืืืื ืงืขื ืขื ืคืืจื ืฆื ืึท ืึธืคึผืืืืงืขื ืื ื ืคืื ืืื ืกื ืืืขื ืืึทื ืืคึผืืึทืืืืืื ื cachemgr.cgi, HTTP Digest ืึธืืขืจ HTTP Basic ืึธืืขื ืืึทืงืืืฉืึทื. ืื ืจืืขื ืืืึทืื ืขืจืึทืืืืืื ืึทืืึทืื ืงืจืืึทื-ืคึผืืึทืฅ ืกืงืจืืคึผืืื ื ืืืจื cachemgr.cgi.
ืืงืืจ: opennet.ru