CVE-2002-0163: Buffer Overflow
Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via compressed DNS responses.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0163?
CVE-2002-0163 is classified as a critical vulnerability due to its potential to cause denial of service and execute arbitrary code remotely.
How do I fix CVE-2002-0163?
To remediate CVE-2002-0163, update to Squid version 2.4 STABLE4 or later, or apply any available security patches.
Which versions of Squid are affected by CVE-2002-0163?
CVE-2002-0163 affects all versions of Squid prior to 2.4 STABLE4 and also includes versions 2.5 and 2.6 until March 12, 2002.
What type of attack is possible due to CVE-2002-0163?
CVE-2002-0163 allows remote attackers to perform denial of service attacks and potentially execute arbitrary code through crafted compressed DNS responses.
Is CVE-2002-0163 still a threat to current systems?
CVE-2002-0163 is no longer a threat to systems that have updated their Squid installations to versions that are not vulnerable.