CVE ID:	CVE-2002-0713
Description:	Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2002-0713 BugTraq ID: 5155 http://www.securityfocus.com/bid/5155 BugTraq ID: 5156 http://www.securityfocus.com/bid/5156 BugTraq ID: 5157 http://www.securityfocus.com/bid/5157 Bugtraq: 20020715 TSLSA-2002-0062 - squid (Google Search) http://marc.info/?l=bugtraq&m=102674543407606&w=2 Caldera Security Advisory: CSSA-2002-046.0 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt Conectiva Linux advisory: CLA-2002:506 http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-044.php RedHat Security Advisories: RHSA-2002:051 http://rhn.redhat.com/errata/RHSA-2002-051.html RedHat Security Advisories: RHSA-2002:130 http://rhn.redhat.com/errata/RHSA-2002-130.html SuSE Security Announcement: SuSE-SA:2002:025 (Google Search) XForce ISS Database: squid-ftp-dir-bo(9481) http://www.iss.net/security_center/static/9481.php XForce ISS Database: squid-gopher-bo(9480) http://www.iss.net/security_center/static/9480.php XForce ISS Database: squid-msnt-helper-bo(9482) http://www.iss.net/security_center/static/9482.php