CVE-2002-0068: High severity Squid Squid vulnerability
Published Mar 8, 2002
·Updated
Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters.
Affected Software
11 affected components
Squid Squid<=2.4_stable_3
redhat Linux=7.2
redhat Linux=6.2
redhat Linux=7.1
redhat Linux=7.0
redhat Linux=6.2
redhat Linux=7.1
redhat Linux=7.1
redhat Linux=6.2
redhat Linux=7.0
redhat Linux=7.2
Remediation
Patch Available
Event History
Mar 8, 2002
CVE Published
05:00 AM
Apr 2, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0068?
CVE-2002-0068 is a denial-of-service vulnerability that allows remote attackers to potentially crash the server and may lead to arbitrary code execution.
2
How do I fix CVE-2002-0068?
To fix CVE-2002-0068, upgrade to a later version of Squid that does not have this vulnerability.
3
What versions of Squid are affected by CVE-2002-0068?
CVE-2002-0068 affects Squid version 2.4 STABLE3 and earlier.
4
Can CVE-2002-0068 be exploited remotely?
Yes, CVE-2002-0068 can be exploited remotely using specially crafted FTP URLs.
5
What kind of attacks does CVE-2002-0068 facilitate?
CVE-2002-0068 facilitates denial-of-service attacks and could allow for remote code execution.