Decades-Old Squid Proxy Flaw ‘Squidbleed’ Can Expose User Data

Security researchers have discovered a memory leak vulnerability in Squid Proxy called Squidbleed that has existed since 1997, similar to the infamous Heartbleed flaw. The vulnerability allows attackers who control an FTP server to potentially steal sensitive data like credentials and session tokens from other users in shared proxy environments like corporate networks and public Wi-Fi hotspots. The flaw has been patched in recent Squid versions, and administrators can mitigate the risk by disabling FTP support if not needed.