[squid-users] Squid ACL [url_regex] bypass vulnerability

2005-02-15 Thread Yong Bong Fong
Dear all, I read from http://esikker.dk/vul_14462.php says that A bug in Squid allows users to bypass certain access controls by passing a URL containing "%00" which exploits the Squid decoding function. This may insert a NUL character into decoded URLs, which may allow users to bypass url_regex

Re: [squid-users] Squid ACL [url_regex] bypass vulnerability

2005-02-15 Thread Henrik Nordstrom
On Tue, 15 Feb 2005, Yong Bong Fong wrote: A bug in Squid allows users to bypass certain access controls by passing a URL containing "%00" which exploits the Squid decoding function. See http://www.squid-cache.org/Advisories/SQUID-2004_1.txt for details of this old vulnerability. Does it mean tha