Skip to content
OpenAdvisories
Unscored DSA-474 1 CVE

squid - ACL bypass

Published Apr 3, 2004 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 squid 2.4.6-2woody2

Vulnerabilities 1

  • Unscored —
    CVE-2004-0189 Public exploit EPSS 14%

    The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a …