CVE-2002-0068

Published: Mar 8, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters.

Affected (11)

Products: Squid: Squid · Redhat: Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Squid Squid	Up to 2.4_stable_3

Configuration B

10 vulnerable

Vulnerable Software	Affected Versions
Redhat Linux	Version 6.2
Redhat Linux	Version 6.2
Redhat Linux	Version 6.2
Redhat Linux	Version 7.0
Redhat Linux	Version 7.0
Redhat Linux	Version 7.1
Redhat Linux	Version 7.1
Redhat Linux	Version 7.1
Redhat Linux	Version 7.2
Redhat Linux	Version 7.2

References (28)

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc (unsafe URL)

Source: cve@mitre.org

http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=101431040422095&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=101440163111826&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=101443252627021&w=2

Source: cve@mitre.org

http://www.caldera.com/support/security/advisories/CSSA-2002-010.0.txt

Source: cve@mitre.org

http://www.iss.net/security_center/static/8258.php

Source: cve@mitre.org

http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-016.php

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2002_008_squid_txt.html

Source: cve@mitre.org

http://www.osvdb.org/5378

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2002-029.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/4148

Source: cve@mitre.org

http://www.squid-cache.org/Versions/v2/2.4/bugs/

Source: cve@mitre.org

Exploit

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=101431040422095&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=101440163111826&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=101443252627021&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.caldera.com/support/security/advisories/CSSA-2002-010.0.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/8258.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-016.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2002_008_squid_txt.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/5378

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2002-029.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/4148

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.squid-cache.org/Versions/v2/2.4/bugs/

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.