{"id":"CVE-2004-2479","state":"PUBLISHED","title":"Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in ref","description":"Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages.","publishedAt":"2005-08-21T04:00:00.000Z","updatedAt":"2024-08-08T01:29:13.899Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://exchange.xforce.ibmcloud.com/vulnerabilities/18406","http://securitytracker.com/id?1012466","http://www.osvdb.org/12282","http://fedoranews.org/updates/FEDORA--.shtml","http://secunia.com/advisories/13408","http://www.squid-cache.org/bugs/show_bug.cgi?id=1143","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9711","http://www.redhat.com/support/errata/RHSA-2005-766.html","http://www.securityfocus.com/bid/11865","http://secunia.com/advisories/16977"],"weaknesses":[],"ingestedAt":"2026-10-29T19:27:06.149Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2004/2xxx/CVE-2004-2479.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2004-2479","state":"PUBLISHED","datePublished":"2005-08-21T04:00:00.000Z","dateUpdated":"2024-08-08T01:29:13.899Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2005-08-21T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18406","name":"squid-hostname-obtain-info(18406)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://securitytracker.com/id?1012466","name":"1012466","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://www.osvdb.org/12282","name":"12282","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://fedoranews.org/updates/FEDORA--.shtml","name":"FLSA-2006:152809","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"http://secunia.com/advisories/13408","name":"13408","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.squid-cache.org/bugs/show_bug.cgi?id=1143","tags":["x_refsource_CONFIRM"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9711","name":"oval:org.mitre.oval:def:9711","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-766.html","name":"RHSA-2005:766","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.securityfocus.com/bid/11865","name":"11865","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://secunia.com/advisories/16977","name":"16977","tags":["third-party-advisory","x_refsource_SECUNIA"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2017-10-10T00:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2004-11-23T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2004-2479","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"squid-hostname-obtain-info(18406)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18406"},{"name":"1012466","refsource":"SECTRACK","url":"http://securitytracker.com/id?1012466"},{"name":"12282","refsource":"OSVDB","url":"http://www.osvdb.org/12282"},{"name":"FLSA-2006:152809","refsource":"FEDORA","url":"http://fedoranews.org/updates/FEDORA--.shtml"},{"name":"13408","refsource":"SECUNIA","url":"http://secunia.com/advisories/13408"},{"name":"http://www.squid-cache.org/bugs/show_bug.cgi?id=1143","refsource":"CONFIRM","url":"http://www.squid-cache.org/bugs/show_bug.cgi?id=1143"},{"name":"oval:org.mitre.oval:def:9711","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9711"},{"name":"RHSA-2005:766","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2005-766.html"},{"name":"11865","refsource":"BID","url":"http://www.securityfocus.com/bid/11865"},{"name":"16977","refsource":"SECUNIA","url":"http://secunia.com/advisories/16977"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18406","name":"squid-hostname-obtain-info(18406)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://securitytracker.com/id?1012466","name":"1012466","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.osvdb.org/12282","name":"12282","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://fedoranews.org/updates/FEDORA--.shtml","name":"FLSA-2006:152809","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://secunia.com/advisories/13408","name":"13408","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.squid-cache.org/bugs/show_bug.cgi?id=1143","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9711","name":"oval:org.mitre.oval:def:9711","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-766.html","name":"RHSA-2005:766","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securityfocus.com/bid/11865","name":"11865","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/16977","name":"16977","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-08T01:29:13.899Z"}}]}}}