CVE-2002-0714: High severity Squid Squid vulnerability
Published Jul 26, 2002
·Updated
FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses.
Affected Software
1 affected component
Squid Squid<=2.4.stable6
Remediation
Patch Available
Patch Available
Patch Available
Event History
Jul 26, 2002
CVE Published
04:00 AM
Apr 2, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0714?
CVE-2002-0714 is considered a moderate severity vulnerability due to the potential for remote attackers to exploit it.
2
How do I fix CVE-2002-0714?
To fix CVE-2002-0714, upgrade to Squid version 2.4.STABLE7 or later.
3
What systems are affected by CVE-2002-0714?
CVE-2002-0714 affects all versions of Squid prior to 2.4.STABLE7.
4
What type of attack does CVE-2002-0714 allow?
CVE-2002-0714 allows attackers to bypass firewall rules and spoof FTP server responses.
5
How does CVE-2002-0714 operate?
CVE-2002-0714 operates by failing to compare the IP addresses of control and data connections with the FTP server.