CVE

Id
5103  
CVE No.
CVE-2002-0713  
Status
Candidate  
Description
Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated.  
Phase
Modified (20050601)  
Votes
ACCEPT(4) Armstrong, Baker, Cole, Cox | MODIFY(1) Frech | NOOP(3) Christey, Foat, Wall  
Comments
Christey> VULNWATCH:20020603 [VulnWatch] [DER #11] - Remotey exploitable fmt string bug in squid | URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0087.html | BUGTRAQ:20020604 [DER #11] - Remotey exploitable fmt string bug in squid | URL:http://online.securityfocus.com/archive/1/275347 | | Note that this report is for the "msntauth" module, which | itself is out-of-date, but there is obviously a codebase relationship | with what"s included in the Squid distribution. | Frech> XF:squid-msnt-helper-bo(9482) | Christey> CALDERA:CSSA-2002-046.0 | URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt | REDHAT:RHSA-2002:051 | URL:http://rhn.redhat.com/errata/RHSA-2002-051.html | Christey> CALDERA:CSSA-2003-SCO.9  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
26866 5103 CVE-2002-0713 CONFIRM:http://www.squid-cache.org/Advisories/SQUID-2002_3.txt  View
26867 5103 CVE-2002-0713 CONFIRM:http://www.squid-cache.org/Versions/v2/2.4/bugs/  View
26868 5103 CVE-2002-0713 REDHAT:RHSA-2002:051  View
26869 5103 CVE-2002-0713 URL:http://rhn.redhat.com/errata/RHSA-2002-051.html  View
26870 5103 CVE-2002-0713 REDHAT:RHSA-2002:130  View
26871 5103 CVE-2002-0713 URL:http://rhn.redhat.com/errata/RHSA-2002-130.html  View
26872 5103 CVE-2002-0713 SUSE:SuSE-SA:2002:025  View
26873 5103 CVE-2002-0713 CALDERA:CSSA-2002-046.0  View
26874 5103 CVE-2002-0713 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt  View
26875 5103 CVE-2002-0713 CONECTIVA:CLA-2002:506  View
26876 5103 CVE-2002-0713 MANDRAKE:MDKSA-2002:044  View
26877 5103 CVE-2002-0713 URL:http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-044.php  View
26878 5103 CVE-2002-0713 BUGTRAQ:20020715 TSLSA-2002-0062 - squid  View
26879 5103 CVE-2002-0713 URL:http://marc.info/?l=bugtraq&m=102674543407606&w=2  View
26880 5103 CVE-2002-0713 BID:5155  View
26881 5103 CVE-2002-0713 URL:http://www.securityfocus.com/bid/5155  View
26882 5103 CVE-2002-0713 BID:5156  View
26883 5103 CVE-2002-0713 URL:http://www.securityfocus.com/bid/5156  View
26884 5103 CVE-2002-0713 BID:5157  View
26885 5103 CVE-2002-0713 URL:http://www.securityfocus.com/bid/5157  View
26886 5103 CVE-2002-0713 XF:squid-msnt-helper-bo(9482)  View
26887 5103 CVE-2002-0713 URL:http://www.iss.net/security_center/static/9482.php  View
26888 5103 CVE-2002-0713 XF:squid-gopher-bo(9480)  View
26889 5103 CVE-2002-0713 URL:http://www.iss.net/security_center/static/9480.php  View
26890 5103 CVE-2002-0713 XF:squid-ftp-dir-bo(9481)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63821 JVNDB-2002-000148 Squid における Gopher client に関連したバッファオーバーフローの脆弱性 Squid には、Gopher client に関連する複数の問題によりバッファオーバーフローが発生する脆弱性が存在します。 CVE-2002-0713 5103 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000148.html  View