Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0308
This issue was addressed in the squid packages as shipped with Red Hat Enterprise Linux 5 via:
The Red Hat Security Response Team has rated this issue as having low security impact, a future squid update may address this flaw in Red Hat Enterprise Linux 3 and 4.
CVSS v2 metrics
|Access Vector||Adjacent Network|
Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).
Red Hat Security Errata
|Red Hat Enterprise Linux 5 (squid)||RHSA-2010:0221||2010-03-29|
Affected Packages State
|Red Hat Enterprise Linux 4||squid||Will not fix|