Mythos discovers 'Squidbleed,' a memory leak that's gone undetected since Clinton era
Plus more blasts from the past: NetWare, FTP, and HTTP
Sometimes it takes a while to detect a vuln. A 29-year-old, Heartbleed-style vulnerability in Squid, a popular open-source caching proxy server, silently leaked users' plaintext HTTP requests and potentially revealed sensitive data, including credentials and session tokens, for decades - until AI (and a few humans) saved the day.
A security researcher and Mythos Preview found the flaw and reported it to project maintainers, who fixed the code earlier this month.
Squid is widely used by large corporations, schools, and internet service providers to cache, filter, and monitor network traffic, and Calif.io researcher Lam Jun Rong said he came across the open source proxy while attempting to connect to the internet on a flight.
“As you might expect, the version of Squid deployed on that plane was released nearly 10 years ago and is affected by the vulnerability I'm about...
Copyright of this story solely belongs to theregister.com. To see the full text click HERE
