Vulnerability Details : CVE-2004-2479
Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages.
Products affected by CVE-2004-2479
- cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable4:*:*:*:*:*:*:*
- cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable5:*:*:*:*:*:*:*
- cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable1:*:*:*:*:*:*:*
- cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable6:*:*:*:*:*:*:*
- cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable7:*:*:*:*:*:*:*
- cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable2:*:*:*:*:*:*:*
- cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable3:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2004-2479
0.72%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 80 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2004-2479
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
10.0
|
2.9
|
NIST |
References for CVE-2004-2479
-
http://securitytracker.com/id?1012466
GoDaddy Domain Name SearchPatch
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9711
404 Not Found
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/18406
Squid Web Proxy Cache hostname information disclosure CVE-2004-2479 Vulnerability Report
-
http://www.securityfocus.com/bid/11865
Patch
-
http://www.redhat.com/support/errata/RHSA-2005-766.html
Support
-
http://fedoranews.org/updates/FEDORA--.shtml
404 Not Found
-
http://www.squid-cache.org/bugs/show_bug.cgi?id=1143
404 Not FoundPatch
Jump to