CVE-2004-0189: High severity Squid Squid vulnerability
The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass urlregex ACLs via a URL with a NULL ("%00") character, which causes Squid to use only a portion of the requested URL when comparing it against the access control lists.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0189?
CVE-2004-0189 is considered a moderate severity vulnerability due to its potential to bypass access control lists in Squid.
How do I fix CVE-2004-0189?
To fix CVE-2004-0189, upgrade to a version of Squid greater than 2.5_stable4 that contains the relevant patches.
Which versions of Squid are affected by CVE-2004-0189?
CVE-2004-0189 affects Squid 2.0_patch2, 2.1_patch2, 2.3_stable5, 2.4, 2.4_stable7, and 2.5_stable4.
What type of attack does CVE-2004-0189 enable?
CVE-2004-0189 enables remote attackers to bypass URL filtering and access control mechanisms.
Is there a workaround for CVE-2004-0189?
A workaround for CVE-2004-0189 may include reviewing and tightening access control lists, but upgrading is recommended for complete mitigation.