CVE-2002-0067: High severity Squid Squid vulnerability
Published Mar 8, 2002
·Updated
Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcpport 0" is specified in squid.conf, which could allow remote attackers to bypass intended access restrictions.
Affected Software
11 affected components
Squid Squid<=2.4_stable_2
redhat Linux=7.2
redhat Linux=6.2
redhat Linux=7.1
redhat Linux=7.0
redhat Linux=6.2
redhat Linux=7.1
redhat Linux=7.1
redhat Linux=6.2
redhat Linux=7.0
redhat Linux=7.2
Remediation
Patch Available
Patch Available
Event History
Mar 8, 2002
CVE Published
05:00 AM
Apr 2, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0067?
CVE-2002-0067 is considered a moderate severity vulnerability due to its potential to allow remote attackers to bypass access controls.
2
How do I fix CVE-2002-0067?
To fix CVE-2002-0067, update to a later version of Squid that properly disables HTCP by default.
3
Which versions of Squid are affected by CVE-2002-0067?
CVE-2002-0067 affects Squid version 2.4 STABLE3 and earlier.
4
What could an attacker do if they exploit CVE-2002-0067?
An attacker exploiting CVE-2002-0067 could bypass intended access restrictions, gaining unauthorized access to information.
5
Is CVE-2002-0067 specific to any operating system?
CVE-2002-0067 is primarily associated with Red Hat Linux versions 6.2, 7.0, 7.1, and 7.2 that utilize vulnerable Squid versions.