CVE-2002-0714
First published: Fri Jul 26 2002(Updated: )
FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Squid Web Proxy Cache | <=2.4.stable6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://rhn.redhat.com/errata/RHSA-2002-130.html
- http://www.squid-cache.org/Versions/v2/2.4/bugs/
- http://www.squid-cache.org/Advisories/SQUID-2002_3.txt
- http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-044.php
- http://rhn.redhat.com/errata/RHSA-2002-051.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000506
- http://www.iss.net/security_center/static/9479.php
- http://www.securityfocus.com/bid/5158
- http://www.osvdb.org/5924
- http://marc.info/?l=bugtraq&m=102674543407606&w=2
Frequently Asked Questions
What is the severity of CVE-2002-0714?
CVE-2002-0714 is considered a moderate severity vulnerability due to the potential for remote attackers to exploit it.
How do I fix CVE-2002-0714?
To fix CVE-2002-0714, upgrade to Squid version 2.4.STABLE7 or later.
What systems are affected by CVE-2002-0714?
CVE-2002-0714 affects all versions of Squid prior to 2.4.STABLE7.
What type of attack does CVE-2002-0714 allow?
CVE-2002-0714 allows attackers to bypass firewall rules and spoof FTP server responses.
How does CVE-2002-0714 operate?
CVE-2002-0714 operates by failing to compare the IP addresses of control and data connections with the FTP server.
- agent/references
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/squid
- canonical/squid web proxy cache
- version/squid web proxy cache/2.4.stable6