Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.0
CVE-2004-2480: Squid proxy lets remote attackers bypass controls via special URL
CVE-2004-2480 · published 21 years ago
Summary
The Squid web proxy included in Debian can be tricked by using "@@" sequences in a web address opened with Internet Explorer, allowing an attacker to bypass filtering rules and reach any website. This undermines the intended security barriers of the proxy. Apply the latest security update for Squid on Debian or configure the proxy to block such URL patterns.
What to do
- Update debian squid to version 2.5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | squid |
< 2.5 Fix: upgrade to 2.5
|
| Debian:13 | debian | squid |
< 2.5 Fix: upgrade to 2.5
|
| Debian:14 | debian | squid |
< 2.5 Fix: upgrade to 2.5
|
| – | national_science_foundation | squid_web_proxy_cache |
2.3_stable5 cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.3_stable5:*:*:*:*:*:*:* |
Original advisory text
Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a URL within Internet Explorer.
Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a URL within Internet Explorer.
Severity
5.0
Medium
Timeline
Published31 Dec 2004
Updated31 Oct 2026
First seen15 Sep 2026
Track software like this
Free during beta