CVE-2005-0194

CVE-2005-0194 describes a vulnerability in Squid 2.5 where the proxy server incorrectly parses empty Access Control Lists (ACLs), including proxy_auth ACLs without defined authentication schemes. This parsing error effectively removes arguments, potentially allowing remote attackers to bypass intended ACLs if administrators disregard parser warnings. The vulnerability carries a critical CVSS score of 10.0, indicating a severe risk with network-based attacks, low complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.