CVE ID:	CVE-2016-10002
Description:	Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted by a client to probe a cache for this information.
Test IDs:	1.3.6.1.4.1.25623.1.0.703745   1.3.6.1.4.1.25623.1.1.2.2017.1018   1.3.6.1.4.1.25623.1.1.1.2.2016.763   1.3.6.1.4.1.25623.1.0.106478   1.3.6.1.4.1.25623.1.0.871751   1.3.6.1.4.1.25623.1.0.871750   1.3.6.1.4.1.25623.1.0.106479   1.3.6.1.4.1.25623.1.1.2.2017.1017   1.3.6.1.4.1.25623.1.0.882646   1.3.6.1.4.1.25623.1.0.882645
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-10002 BugTraq ID: 94953 http://www.securityfocus.com/bid/94953 Debian Security Information: DSA-3745 (Google Search) http://www.debian.org/security/2016/dsa-3745 http://www.openwall.com/lists/oss-security/2016/12/18/1 RedHat Security Advisories: RHSA-2017:0182 http://rhn.redhat.com/errata/RHSA-2017-0182.html RedHat Security Advisories: RHSA-2017:0183 http://rhn.redhat.com/errata/RHSA-2017-0183.html http://www.securitytracker.com/id/1037513