← Database

CVE-2004-0189

HIGH CVSS: 7.5 Published: 2004-03-15 Modified: 2026-06-16

Description

The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00") character, which causes Squid to use only a portion of the requested URL when comparing it against the access control lists.

Affected Platforms

Squid Squid

Weakness Type

NVD-CWE-Other

References