Security Advisory

CVE-2004-0189

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2004-09-01 04:00:00

Last updated 2024-08-08 00:10:03

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00") character, which causes Squid to use only a portion of the requested URL when comparing it against the access control lists.

← Browse all CVEs View on cve.org ↗