This issue was discovered by Nuno Costa: http://archives.neohapsis.com/archives/bugtraq/2004-05/0070.html hello im not a expert in this area, but i work in a intranet that haves the Squid/2.3.STABLE5 filtring all access's to the internet.. so i don't have access to the internet directaly, but i know that this proxy allow access to especific web sites.. so, in the past if i us this: http://urlwebsite_allowed.pt -> the vuln that is already discovered... i have access to the website that i want... but in this days, this vuln is now fixed so... in my test's i found this way to pass this proxy, using: http://website_allowed.ptmy_url -> now i have access... using url.pt i can bypass the proxy and access the internet, i don't know how faur, this could go!! so i don't know if this is a bug from IE or just a simple bug from Squid.. ??? can anyone tell what we have in hands ?
This issue should also affect RHEL2.1 and RHEL3.
It was reported against 2.3 version and it seems to affect only this version. I can't reproduce it on 2.4 or 2.5 version, I'm going to investigate it more...
Martin, There is a bit more information and more links in the CVE id: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-2480 I spent some time yesterday looking for this issue in upstream, but didn't find much. If it was fixed it was done in a non public manner.
I went trough it too. It seems to me that this bug disappeared when upstream switched/rewrited code from 2.3 to 2.4, I spent today googling/searching and I haven't found anything relevant either. I wrote to original reporter and I'm going to test the archaic 2.3 version...
Unable to reproduce on the latest RHEL4, RHEL3, RHEL2.1, FC4 and FC3 + old squid 2.3.STABLE5. I tested it with Mozila/Firefox/IE...
The original reporter hasn't replied and I can't reproduce it, so I'm closing it as WORKSFORME. Please reopen if you find more info...