| Vulnerability Name: | CVE-2002-0713 (CCN-9480) | ||||||||
| Assigned: | 2002-07-03 | ||||||||
| Published: | 2002-07-03 | ||||||||
| Updated: | 2016-10-18 | ||||||||
| Summary: | Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated. | ||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: CALDERA Type: UNKNOWN CSSA-2002-046.0 Source: CCN Type: FreeBSD Security Notice FreeBSD-SN-02:05 security issues in ports Source: MITRE Type: CNA CVE-2002-0713 Source: CCN Type: Conectiva Linux Announcement CLSA-2002:506 squid Source: BUGTRAQ Type: UNKNOWN 20020715 TSLSA-2002-0062 - squid Source: REDHAT Type: UNKNOWN RHSA-2002:051 Source: CCN Type: RHSA-2002-130 squid security update Source: REDHAT Type: Patch, Vendor Advisory RHSA-2002:130 Source: XF Type: UNKNOWN squid-gopher-bo(9480) Source: XF Type: UNKNOWN squid-ftp-dir-bo(9481) Source: XF Type: UNKNOWN squid-msnt-helper-bo(9482) Source: MANDRAKE Type: Patch MDKSA-2002:044 Source: CCN Type: BID-5153 Multiple Squid Remote Code Execution Vulnerabilities Source: BID Type: UNKNOWN 5155 Source: CCN Type: BID-5155 Squid MSNT Auth Helper Buffer Overflow Vulnerability Source: BID Type: UNKNOWN 5156 Source: CCN Type: BID-5156 Squid FTP Directory Parsing Buffer Overflow Vulnerability Source: BID Type: UNKNOWN 5157 Source: CCN Type: BID-5157 Squid Gopher Proxy Buffer Overflow Vulnerability Source: CCN Type: Squid Proxy Cache Security Update Advisory SQUID-2002:3 Squid Proxy Cache Security Update Advisory Source: CONFIRM Type: Patch, Vendor Advisory http://www.squid-cache.org/Advisories/SQUID-2002_3.txt Source: CONFIRM Type: Patch http://www.squid-cache.org/Versions/v2/2.4/bugs/ Source: XF Type: UNKNOWN squid-gopher-bo(9480) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| Vulnerability Name: | CVE-2002-0713 (CCN-9481) | ||||||||
| Assigned: | 2002-07-03 | ||||||||
| Published: | 2002-07-03 | ||||||||
| Updated: | 2016-10-18 | ||||||||
| Summary: | Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated. | ||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2002-0713 Source: CCN Type: Conectiva Linux Announcement CLSA-2002:506 squid Source: CCN Type: RHSA-2002-130 squid security update Source: CCN Type: BID-5153 Multiple Squid Remote Code Execution Vulnerabilities Source: CCN Type: BID-5155 Squid MSNT Auth Helper Buffer Overflow Vulnerability Source: CCN Type: BID-5156 Squid FTP Directory Parsing Buffer Overflow Vulnerability Source: CCN Type: BID-5157 Squid Gopher Proxy Buffer Overflow Vulnerability Source: CCN Type: Squid Proxy Cache Security Update Advisory SQUID-2002:3 Squid Proxy Cache Security Update Advisory Source: XF Type: UNKNOWN squid-ftp-dir-bo(9481) | ||||||||
| Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||||
| Vulnerability Name: | CVE-2002-0713 (CCN-9482) | ||||||||
| Assigned: | 2002-07-03 | ||||||||
| Published: | 2002-07-03 | ||||||||
| Updated: | 2002-07-03 | ||||||||
| Summary: | Squid is vulnerable to a buffer overflow in the MSNT auth helper component. Under certain configurations, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the proxy server to crash. | ||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: CCN Type: SCO Security Advisory CSSA-2003-SCO.9 Buffer overflows and other security vulnerabilities in Squid Source: CCN Type: VulnWatch Mailing List, Mon Jun 03 2002 - 21:25:18 CDT [DER #11] - Remotey exploitable fmt string bug in squid Source: MITRE Type: CNA CVE-2002-0713 Source: CCN Type: Conectiva Linux Announcement CLSA-2002:506 squid Source: CCN Type: RHSA-2002-051 New Squid packages available Source: CCN Type: RHSA-2002-130 squid security update Source: CCN Type: BID-5155 Squid MSNT Auth Helper Buffer Overflow Vulnerability Source: CCN Type: BID-5156 Squid FTP Directory Parsing Buffer Overflow Vulnerability Source: CCN Type: BID-5157 Squid Gopher Proxy Buffer Overflow Vulnerability Source: CCN Type: Squid Proxy Cache Security Update Advisory SQUID-2002:3 Squid Proxy Cache Security Update Advisory Source: CCN Type: Trustix Secure Linux Security Advisory #2002-0062 squid Source: XF Type: UNKNOWN squid-msnt-helper-bo(9482) | ||||||||
| Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||||
| BACK | |||||||||