CVE

Id
5104  
CVE No.
CVE-2002-0714  
Status
Entry  
Description
FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
26891 5104 CVE-2002-0714 CONFIRM:http://www.squid-cache.org/Advisories/SQUID-2002_3.txt  View
26892 5104 CVE-2002-0714 CONFIRM:http://www.squid-cache.org/Versions/v2/2.4/bugs/  View
26893 5104 CVE-2002-0714 REDHAT:RHSA-2002:051  View
26894 5104 CVE-2002-0714 URL:http://rhn.redhat.com/errata/RHSA-2002-051.html  View
26895 5104 CVE-2002-0714 REDHAT:RHSA-2002:130  View
26896 5104 CVE-2002-0714 URL:http://rhn.redhat.com/errata/RHSA-2002-130.html  View
26897 5104 CVE-2002-0714 SUSE:SuSE-SA:2002:025  View
26898 5104 CVE-2002-0714 CALDERA:CSSA-2002-046.0  View
26899 5104 CVE-2002-0714 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt  View
26900 5104 CVE-2002-0714 CONECTIVA:CLA-2002:506  View
26901 5104 CVE-2002-0714 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000506  View
26902 5104 CVE-2002-0714 MANDRAKE:MDKSA-2002:044  View
26903 5104 CVE-2002-0714 URL:http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-044.php  View
26904 5104 CVE-2002-0714 BUGTRAQ:20020715 TSLSA-2002-0062 - squid  View
26905 5104 CVE-2002-0714 URL:http://marc.info/?l=bugtraq&m=102674543407606&w=2  View
26906 5104 CVE-2002-0714 XF:squid-ftp-data-injection(9479)  View
26907 5104 CVE-2002-0714 URL:http://www.iss.net/security_center/static/9479.php  View
26908 5104 CVE-2002-0714 BID:5158  View
26909 5104 CVE-2002-0714 URL:http://www.securityfocus.com/bid/5158  View
26910 5104 CVE-2002-0714 OSVDB:5924  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63822 JVNDB-2002-000149 Squid の FTP proxy におけるセキュリティ制限を回避される脆弱性 Squid の FTP クライアントには、FTP のデータ送受信用チャンネルにおいて IP アドレスの正当性をチェックしない脆弱性が存在します。 CVE-2002-0714 5104 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000149.html  View