NVD

Id
79713  
Name
CVE-2002-0714  
Description
FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-07-26  
Modified Date
2016-10-17  
Seq
2002-0714  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
397670 79713 CVE-2002-0714 CSSA-2002-046.0  View
397671 79713 CVE-2002-0714 CLA-2002:506  View
397672 79713 CVE-2002-0714 20020715 TSLSA-2002-0062 - squid  View
397673 79713 CVE-2002-0714 RHSA-2002:051  View
397674 79713 CVE-2002-0714 RHSA-2002:130  View
397675 79713 CVE-2002-0714 squid-ftp-data-injection(9479)  View
397676 79713 CVE-2002-0714 MDKSA-2002:044  View
397677 79713 CVE-2002-0714 5158  View
397678 79713 CVE-2002-0714 http://www.squid-cache.org/Advisories/SQUID-2002_3.txt  View
397679 79713 CVE-2002-0714 http://www.squid-cache.org/Versions/v2/2.4/bugs/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63822 JVNDB-2002-000149 Squid の FTP proxy におけるセキュリティ制限を回避される脆弱性 Squid の FTP クライアントには、FTP のデータ送受信用チャンネルにおいて IP アドレスの正当性をチェックしない脆弱性が存在します。 CVE-2002-0714 5104 CVE-2002-0714 79713 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000149.html 2002-07-03 2007-04-01 View