NVD

Id
79083  
Name
CVE-2002-0067  
Description
Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote attackers to bypass intended access restrictions.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-03-08  
Modified Date
2016-10-17  
Seq
2002-0067  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
394792 79083 CVE-2002-0067 FreeBSD-SA-02:12  View
394793 79083 CVE-2002-0067 CSSA-2002-SCO.7  View
394794 79083 CVE-2002-0067 CLA-2002:464  View
394795 79083 CVE-2002-0067 20020221 Squid HTTP Proxy Security Update Advisory 2002:1  View
394796 79083 CVE-2002-0067 20020222 TSLSA-2002-0031 - squid  View
394797 79083 CVE-2002-0067 squid-htcp-enabled(8261)  View
394798 79083 CVE-2002-0067 MDKSA-2002:016  View
394799 79083 CVE-2002-0067 RHSA-2002:029  View
394800 79083 CVE-2002-0067 4150  View
394801 79083 CVE-2002-0067 http://www.squid-cache.org/Versions/v2/2.4/bugs/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63717 JVNDB-2002-000044 Squid の HTCP インターフェースを無効化できない脆弱性 Squid の HTCP (Hyper Text Caching Protocol) インターフェイスを、 squid.conf から無効にすることができない脆弱性が存在します。 CVE-2002-0067 4461 CVE-2002-0067 79083 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000044.html 2002-02-21 2007-04-01 View