CVE-2014-9749

Name of the Vulnerable Software and Affected Versions Squid versions 3.4.4 through 3.4.11 Squid versions 3.5.0.1 through 3.5.1

Description The issue allows remote authenticated users to retain access by leveraging a stale nonce when Digest authentication is used.

Recommendations For Squid versions 3.4.4 through 3.4.11, update to a version outside of this range to resolve the issue. For Squid versions 3.5.0.1 through 3.5.1, update to a version outside of this range to resolve the issue. As a temporary workaround, consider disabling Digest authentication until a patch is available.