CVE-2004-2480: Medium severity National Science Foundation Squid Web Proxy Cache vulnerability
Published Dec 31, 2004
·Updated
Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a URL within Internet Explorer.
Affected Software
1 affected component
National Science Foundation Squid Web Proxy Cache=2.3_stable5
Event History
Dec 31, 2004
CVE Published
05:00 AM
Aug 21, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2480?
CVE-2004-2480 is considered a moderate severity vulnerability due to the ability to bypass security controls.
2
How do I fix CVE-2004-2480?
To fix CVE-2004-2480, it is recommended to upgrade to a later version of Squid Web Proxy Cache that addresses this vulnerability.
3
What systems are affected by CVE-2004-2480?
CVE-2004-2480 specifically affects Squid Web Proxy Cache version 2.3.STABLE5.
4
Can CVE-2004-2480 be exploited remotely?
Yes, CVE-2004-2480 can be exploited remotely by attackers using specially crafted URLs.
5
What implications does CVE-2004-2480 have for web security?
CVE-2004-2480 allows attackers to access arbitrary websites, posing a significant risk to network security and privacy.