CVE-2002-0714

Published: Jul 26, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses.

Affected (1)

Products: Squid: Squid

Squid

1 product

Squid

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Squid Squid	Up to 2.4.stable6

References (22)

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt (unsafe URL)

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000506

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=102674543407606&w=2

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2002-051.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2002-130.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.iss.net/security_center/static/9479.php

Source: cve@mitre.org

http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-044.php

Source: cve@mitre.org

Patch

http://www.osvdb.org/5924

Source: cve@mitre.org

http://www.securityfocus.com/bid/5158

Source: cve@mitre.org

http://www.squid-cache.org/Advisories/SQUID-2002_3.txt

Source: cve@mitre.org

PatchVendor Advisory

http://www.squid-cache.org/Versions/v2/2.4/bugs/

Source: cve@mitre.org

Patch

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt (unsafe URL)