CVE-1999-1273
Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding...
Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences.
Exploit likelihood
What each source reports
NVD Score used
Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences.
- Record
CVE-1999-1273- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences.
- Record
CVE-1999-1273- Updated
- 2026-11-02
EUVDEUVD-1999-1254 No score
Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences.
- Record
EUVD-1999-1254- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3q7h-hq7j-vcqg No score
Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding...
Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences.
- Record
GHSA-3q7h-hq7j-vcqg- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-1999-1273 is a high vulnerability (CVSS 7.5) in National Science Foundation Squid Web Proxy, published February 20, 1998. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.29%, the 70th percentile. No source names a fixed version.