{"id":"CVE-2004-2479","aliases":["DEBIAN-CVE-2004-2479","EUVD-2004-2470","GHSA-wf7x-gjvh-m5r3","RHSA-2005:766"],"status":"published","title":"Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs...","description":"Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02081,"percentile":0.81663,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2004-12-31T05:00:00Z","modified":"2026-10-21T15:47:25Z","fixes":[{"ecosystem":"Debian:12","package":"squid","fixed_in":["2.5.8"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"squid","fixed_in":["2.5.8"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"squid","fixed_in":["2.5.8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.8"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.8"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.5.STABLE3-6.3E.14"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.5.STABLE3-6.3E.14"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.5.STABLE3-6.3E.14"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.5.STABLE3-6.3E.14"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.5.STABLE3-6.3E.14"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.5.STABLE3-6.3E.14"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.5.STABLE3-6.3E.14"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.5.STABLE3-6.3E.14"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.5.STABLE6-3.4E.11"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.5.STABLE6-3.4E.11"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.5.STABLE6-3.4E.11"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.5.STABLE6-3.4E.11"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.5.STABLE6-3.4E.11"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.5.STABLE6-3.4E.11"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.5.STABLE6-3.4E.11"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.5.STABLE6-3.4E.11"}]}],"bundled":3}],"products":[{"vendor":"national_science_foundation","product":"squid_web_proxy_cache"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18406","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://securitytracker.com/id?1012466","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Patch","fix"]},{"url":"http://www.osvdb.org/12282","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://fedoranews.org/updates/FEDORA--.shtml","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://secunia.com/advisories/13408","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://www.squid-cache.org/bugs/show_bug.cgi?id=1143","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix","article"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9711","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-766.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/11865","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch","fix"]},{"url":"http://secunia.com/advisories/16977","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-2479","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wf7x-gjvh-m5r3"},{"url":"https://security-tracker.debian.org/tracker/CVE-2004-2479","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2005:766","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"http://www.squid-cache.org/bugs/show_bug.cgi?id=1368","tags":["article"]},{"url":"http://www.squid-cache.org/bugs/show_bug.cgi?id=1325","tags":["article"]},{"url":"http://www.squid-cache.org/bugs/show_bug.cgi?id=1355","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=166520","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=167413","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_766.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-2479","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617425","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-2479","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-2794","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617754","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2794","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2794","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-2796","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617755","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2796","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2796","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2004-2479","description":"Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages.","status":"published","published":"2005-08-21T04:00:00Z","modified":"2024-08-08T01:29:13.899Z","updated_at":"2026-11-02T14:34:53.70484Z"}],"euvd":[{"id":"EUVD-2004-2470","description":"Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages.","status":"published","published":"2005-08-21T04:00:00Z","modified":"2024-08-08T01:29:13Z","updated_at":"2026-11-03T01:15:10.453137Z"}],"ghsa":[{"id":"GHSA-wf7x-gjvh-m5r3","title":"Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs...","description":"Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages.","status":"published","published":"2022-04-29T03:01:32Z","modified":"2023-01-30T05:04:02Z","updated_at":"2026-11-02T14:46:57.494982Z"}],"nvd":[{"id":"CVE-2004-2479","description":"Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages.","status":"published","published":"2004-12-31T05:00:00Z","modified":"2026-06-16T22:09:43.847Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:53.133049Z"}],"osv":[{"id":"CVE-2004-2479","description":"Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages.","status":"published","published":"2004-12-31T05:00:00Z","modified":"2026-04-10T03:36:46.031083Z","updated_at":"2026-11-02T15:43:56.315348Z"},{"id":"DEBIAN-CVE-2004-2479","description":"Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages.","status":"published","published":"2004-12-31T05:00:00Z","modified":"2026-10-21T15:47:25.624525279Z","updated_at":"2026-11-02T15:45:22.55978Z"},{"id":"RHSA-2005:766","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-09-17T00:35:06Z","modified":"2026-06-26T10:03:43Z","updated_at":"2026-11-02T15:52:59.135214Z"}]}}