Vulnerability in National Science Foundation Squid Web Proxy Cache
CVE-2004-2479
Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.0 (Medium). Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.021 (81.2th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 81st percentile — 81.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.021 · newest: 0.021 · change: 0.000
Affected products
- National Science Foundation Squid Web Proxy Cache — versions 2.5_stable1, 2.5_stable2, 2.5_stable3
References
- exchange.xforce.ibmcloud.com/vulnerabilities/18406 (vdb-entry)
- securitytracker.com/id (Patch, vdb-entry)
- www.osvdb.org/12282 (vdb-entry)
- fedoranews.org/updates/FEDORA--.shtml (vendor-advisory)
- secunia.com/advisories/13408 (Patch, Vendor Advisory, third-party-advisory)
- www.squid-cache.org/bugs/show_bug.cgi (Patch)
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:9711 (signature, vdb-entry)
- www.redhat.com/support/errata/RHSA-2005-766.html (vendor-advisory)
- www.securityfocus.com/bid/11865 (Patch, vdb-entry)
- secunia.com/advisories/16977 (third-party-advisory)