CVE-2002-0713 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2002-0713
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2002-0713

Description: Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated.

CVE Status: Candidate

References: XF http://www.iss.net/security_center/static/9482.php http://www.iss.net/security_center/static/9480.php http://www.iss.net/security_center/static/9481.php SUSE REDHAT http://rhn.redhat.com/errata/RHSA-2002-130.html http://rhn.redhat.com/errata/RHSA-2002-051.html MANDRAKE http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-044.php CONFIRM http://www.squid-cache.org/Versions/v2/2.4/bugs/ http://www.squid-cache.org/Advisories/SQUID-2002_3.txt CONECTIVA CALDERA BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=102674543407606&w=2 BID 5155 5156 5157

Return to the previous page.