CVE

Id
4556  
CVE No.
CVE-2002-0163  
Status
Entry  
Description
Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via compressed DNS responses.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
22626 4556 CVE-2002-0163 CONFIRM:http://www.squid-cache.org/Advisories/SQUID-2002_2.txt  View
22627 4556 CVE-2002-0163 FREEBSD:FreeBSD-SA-02:19  View
22628 4556 CVE-2002-0163 URL:ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:19.squid.asc  View
22629 4556 CVE-2002-0163 MANDRAKE:MDKSA-2002:027  View
22630 4556 CVE-2002-0163 URL:http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-027.php  View
22631 4556 CVE-2002-0163 BUGTRAQ:20020326 updated squid advisory  View
22632 4556 CVE-2002-0163 URL:http://marc.info/?l=bugtraq&m=101716495023226&w=2  View
22633 4556 CVE-2002-0163 CALDERA:CSSA-2002-017.1  View
22634 4556 CVE-2002-0163 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-017.1.txt  View
22635 4556 CVE-2002-0163 CALDERA:CSSA-2002-SCO.26  View
22636 4556 CVE-2002-0163 REDHAT:RHSA-2002:051  View
22637 4556 CVE-2002-0163 URL:http://rhn.redhat.com/errata/RHSA-2002-051.html  View
22638 4556 CVE-2002-0163 BID:4363  View
22639 4556 CVE-2002-0163 URL:http://www.securityfocus.com/bid/4363  View
22640 4556 CVE-2002-0163 XF:squid-dns-reply-dos(8628)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63739 JVNDB-2002-000066 Squid の圧縮 DNS 応答の処理におけるバッファオーバーフローの脆弱性 Squid の圧縮 DNS 応答の処理において、悪意ある DNS サーバからレスポンスを受け取った場合に、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2002-0163 4556 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000066.html  View