info
discussion
exploit
solution
references
Squid Proxy NULL URL Character Unauthorized Access Vulnerability
The following proof of concept has been supplied:
http://foo%00@www.example.com/
Privacy Statement
Copyright 2010, SecurityFocus