medium5.0
CVE-2004-2479
Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail,…
Impact
Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| National Science Foundation | Squid Web Proxy Cache | Versions 2.5_stable1, 2.5_stable2, 2.5_stable3, 2.5_stable4, 2.5_stable5, 2.5_stable6 |
References
- NVD record
- CVE.org record
- http://fedoranews.org/updates/FEDORA--.shtml
- http://secunia.com/advisories/13408
- http://secunia.com/advisories/16977
- http://securitytracker.com/id?1012466
- http://www.osvdb.org/12282
- http://www.redhat.com/support/errata/RHSA-2005-766.html
- http://www.securityfocus.com/bid/11865
- http://www.squid-cache.org/bugs/show_bug.cgi?id=1143
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18406
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9711
- http://fedoranews.org/updates/FEDORA--.shtml
- http://secunia.com/advisories/13408
- http://secunia.com/advisories/16977
- http://securitytracker.com/id?1012466
- http://www.osvdb.org/12282
- http://www.redhat.com/support/errata/RHSA-2005-766.html
- http://www.securityfocus.com/bid/11865
- http://www.squid-cache.org/bugs/show_bug.cgi?id=1143
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18406
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9711