{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2004-11-23T00:00:00", "descriptions": [{"lang": "en", "value": "Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-10-10T00:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "squid-hostname-obtain-info(18406)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18406"}, {"name": "1012466", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1012466"}, {"name": "12282", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/12282"}, {"name": "FLSA-2006:152809", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "http://fedoranews.org/updates/FEDORA--.shtml"}, {"name": "13408", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/13408"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.squid-cache.org/bugs/show_bug.cgi?id=1143"}, {"name": "oval:org.mitre.oval:def:9711", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9711"}, {"name": "RHSA-2005:766", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2005-766.html"}, {"name": "11865", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/11865"}, {"name": "16977", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/16977"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2004-2479", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "squid-hostname-obtain-info(18406)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18406"}, {"name": "1012466", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1012466"}, {"name": "12282", "refsource": "OSVDB", "url": "http://www.osvdb.org/12282"}, {"name": "FLSA-2006:152809", "refsource": "FEDORA", "url": "http://fedoranews.org/updates/FEDORA--.shtml"}, {"name": "13408", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/13408"}, {"name": "http://www.squid-cache.org/bugs/show_bug.cgi?id=1143", "refsource": "CONFIRM", "url": "http://www.squid-cache.org/bugs/show_bug.cgi?id=1143"}, {"name": "oval:org.mitre.oval:def:9711", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9711"}, {"name": "RHSA-2005:766", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2005-766.html"}, {"name": "11865", "refsource": "BID", "url": "http://www.securityfocus.com/bid/11865"}, {"name": "16977", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/16977"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T01:29:13.899Z"}, "title": "CVE Program Container", "references": [{"name": "squid-hostname-obtain-info(18406)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18406"}, {"name": "1012466", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1012466"}, {"name": "12282", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/12282"}, {"name": "FLSA-2006:152809", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "http://fedoranews.org/updates/FEDORA--.shtml"}, {"name": "13408", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/13408"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.squid-cache.org/bugs/show_bug.cgi?id=1143"}, {"name": "oval:org.mitre.oval:def:9711", "tags": ["vdb-entry", "signature", "x_refsource_OVAL", "x_transferred"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9711"}, {"name": "RHSA-2005:766", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2005-766.html"}, {"name": "11865", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/11865"}, {"name": "16977", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/16977"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2004-2479", "datePublished": "2005-08-21T04:00:00", "dateReserved": "2005-08-21T00:00:00", "dateUpdated": "2024-08-08T01:29:13.899Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable1:*:*:*:*:*:*:*", "matchCriteriaId": "DD48BFDF-1CAF-45DF-9483-9A9FA3F55370", "vulnerable": true}, {"criteria": "cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable2:*:*:*:*:*:*:*", "matchCriteriaId": "7D5DFA3A-34D1-4B4B-8B7D-554AD51C953B", "vulnerable": true}, {"criteria": "cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable3:*:*:*:*:*:*:*", "matchCriteriaId": "C487E88E-A2F8-47B5-852A-A9E701077957", "vulnerable": true}, {"criteria": "cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable4:*:*:*:*:*:*:*", "matchCriteriaId": "707BEDA1-1947-4851-8565-F725CF14741B", "vulnerable": true}, {"criteria": "cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable5:*:*:*:*:*:*:*", "matchCriteriaId": "1CAEF8E8-E810-453A-8C3D-7FF5543B6597", "vulnerable": true}, {"criteria": "cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable6:*:*:*:*:*:*:*", "matchCriteriaId": "F5381D23-D780-4537-AD0D-EE59A7FBC52A", "vulnerable": true}, {"criteria": "cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable7:*:*:*:*:*:*:*", "matchCriteriaId": "F0212EAA-3D10-43F1-920F-549497A35199", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages."}], "id": "CVE-2004-2479", "lastModified": "2024-11-20T23:53:27.467", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}]}, "published": "2004-12-31T05:00:00.000", "references": [{"source": "[email protected]", "url": "http://fedoranews.org/updates/FEDORA--.shtml"}, {"source": "[email protected]", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/13408"}, {"source": "[email protected]", "url": "http://secunia.com/advisories/16977"}, {"source": "[email protected]", "tags": ["Patch"], "url": "http://securitytracker.com/id?1012466"}, {"source": "[email protected]", "url": "http://www.osvdb.org/12282"}, {"source": "[email protected]", "url": "http://www.redhat.com/support/errata/RHSA-2005-766.html"}, {"source": "[email protected]", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/11865"}, {"source": "[email protected]", "tags": ["Patch"], "url": "http://www.squid-cache.org/bugs/show_bug.cgi?id=1143"}, {"source": "[email protected]", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18406"}, {"source": "[email protected]", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9711"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://fedoranews.org/updates/FEDORA--.shtml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/13408"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/16977"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://securitytracker.com/id?1012466"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/12282"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.redhat.com/support/errata/RHSA-2005-766.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/11865"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.squid-cache.org/bugs/show_bug.cgi?id=1143"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18406"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9711"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "[email protected]", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2005:766", "cpe": "cpe:/o:redhat:enterprise_linux:3", "package": "squid-7:2.5.STABLE3-6.3E.14", "product_name": "Red Hat Enterprise Linux 3", "release_date": "2005-09-15T00:00:00Z"}, {"advisory": "RHSA-2005:766", "cpe": "cpe:/o:redhat:enterprise_linux:4", "package": "squid-7:2.5.STABLE6-3.4E.11", "product_name": "Red Hat Enterprise Linux 4", "release_date": "2005-09-15T00:00:00Z"}], "bugzilla": {"description": "security flaw", "id": "1617425", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617425"}, "csaw": false, "details": ["Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages."], "name": "CVE-2004-2479", "public_date": "2004-11-23T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2004-2479\nhttps://nvd.nist.gov/vuln/detail/CVE-2004-2479"], "threat_severity": "Low"}