Unscored severity · published Dec 31, 2004
CVE-2004-2479
Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SW
Squid Web Proxy Cache · National Science Foundation
2.5_stable1; 2.5_stable2; 2.5_stable3; 2.5_stable4; 2.5_stable5; 2.5_stable6; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2479
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2479
fedoranews.org
http://fedoranews.org/updates/FEDORA--.shtml
Patch
http://secunia.com/advisories/13408
secunia.com
http://secunia.com/advisories/16977
Patch
http://securitytracker.com/id?1012466
www.osvdb.org
http://www.osvdb.org/12282
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2005-766.html
More from Squid Web Proxy Cache
–
CVE-2004-2480
Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a URL within Internet Explorer
–
CVE-2004-0541
Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to…