CVE

Id
5105  
CVE No.
CVE-2002-0715  
Status
Candidate  
Description
Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow remote web sites to obtain the user"s proxy login and password.  
Phase
Modified (20050601)  
Votes
ACCEPT(4) Armstrong, Baker, Cole, Cox | MODIFY(1) Frech | NOOP(3) Christey, Foat, Wall  
Comments
Frech> XF:squid-auth-header-forwarding(9478) | Christey> REDHAT:RHSA-2002:051 | URL:http://rhn.redhat.com/errata/RHSA-2002-051.html | Christey> CALDERA:CSSA-2003-SCO.9  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
26911 5105 CVE-2002-0715 CONFIRM:http://www.squid-cache.org/Advisories/SQUID-2002_3.txt  View
26912 5105 CVE-2002-0715 CONFIRM:http://www.squid-cache.org/Versions/v2/2.4/bugs/  View
26913 5105 CVE-2002-0715 REDHAT:RHSA-2002:051  View
26914 5105 CVE-2002-0715 URL:http://rhn.redhat.com/errata/RHSA-2002-051.html  View
26915 5105 CVE-2002-0715 REDHAT:RHSA-2002:130  View
26916 5105 CVE-2002-0715 URL:http://rhn.redhat.com/errata/RHSA-2002-130.html  View
26917 5105 CVE-2002-0715 SUSE:SuSE-SA:2002:025  View
26918 5105 CVE-2002-0715 CALDERA:CSSA-2002-046.0  View
26919 5105 CVE-2002-0715 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt  View
26920 5105 CVE-2002-0715 CONECTIVA:CLA-2002:506  View
26921 5105 CVE-2002-0715 MANDRAKE:MDKSA-2002:044  View
26922 5105 CVE-2002-0715 URL:http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-044.php  View
26923 5105 CVE-2002-0715 BUGTRAQ:20020715 TSLSA-2002-0062 - squid  View
26924 5105 CVE-2002-0715 URL:http://marc.info/?l=bugtraq&m=102674543407606&w=2  View
26925 5105 CVE-2002-0715 BID:5154  View
26926 5105 CVE-2002-0715 URL:http://www.securityfocus.com/bid/5154  View
26927 5105 CVE-2002-0715 XF:squid-auth-header-forwarding(9478)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63823 JVNDB-2002-000150 Squid におけるプロキシ認証情報が漏洩する脆弱性 Squid において、通常の proxy の使用に認証を必要とするように設定し、また、サイトによっては認証の必要がないように設定した場合、proxy の認証情報を接続先のサーバへ転送してしまう脆弱性が存在します。 CVE-2002-0715 5105 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000150.html  View