29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests
A heap over-read in the Squid web proxy, traced to a 1997 FTP-parsing change and still present in the default configuration, can leak another user's cleartext HTTP request, including credentials and session tokens, to anyone already permitted to send...