CVE-2004-2479

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages.

Affected products

National Science Foundation Squid Web Proxy Cache: 2.5_stable1, 2.5_stable2, 2.5_stable3, 2.5_stable4, 2.5_stable5, 2.5_stable6 (+1)

References

http://fedoranews.org/updates/FEDORA--.shtml
http://secunia.com/advisories/13408
http://secunia.com/advisories/16977
http://securitytracker.com/id?1012466
http://www.osvdb.org/12282
http://www.redhat.com/support/errata/RHSA-2005-766.html
http://www.securityfocus.com/bid/11865
http://www.squid-cache.org/bugs/show_bug.cgi?id=1143
https://exchange.xforce.ibmcloud.com/vulnerabilities/18406
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9711
http://fedoranews.org/updates/FEDORA--.shtml
http://secunia.com/advisories/13408

Get alerted when CVE-2004-2479 or the next vulnerability affects your stack