CVE ID:	CVE-2002-0714
Description:	FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2002-0714 BugTraq ID: 5158 http://www.securityfocus.com/bid/5158 Bugtraq: 20020715 TSLSA-2002-0062 - squid (Google Search) http://marc.info/?l=bugtraq&m=102674543407606&w=2 Caldera Security Advisory: CSSA-2002-046.0 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt Conectiva Linux advisory: CLA-2002:506 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000506 http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-044.php http://www.osvdb.org/5924 RedHat Security Advisories: RHSA-2002:051 http://rhn.redhat.com/errata/RHSA-2002-051.html RedHat Security Advisories: RHSA-2002:130 http://rhn.redhat.com/errata/RHSA-2002-130.html SuSE Security Announcement: SuSE-SA:2002:025 (Google Search) XForce ISS Database: squid-ftp-data-injection(9479) http://www.iss.net/security_center/static/9479.php