Test ID:	1.3.6.1.4.1.25623.1.0.811542
Category:	Buffer overflow
Title:	Squid 2.0 < 2.4 STABLE4 FTP Proxy URL Buffer Overflow Vulnerability
Summary:	Squid is prone to a buffer overflow vulnerability.
Description:	Summary: Squid is prone to a buffer overflow vulnerability. Vulnerability Insight: The flaw is due to a buffer overflow error in the Squid server's FTP URL handling. Vulnerability Impact: Successful exploitation will allow remote attackers to crash the squid process or execute arbitrary code. To exploit this vulnerability, and attacker must have the ability to use the Squid cache, and additionally be able to proxy FTP requests through the server. Affected Software/OS: Squid version 2.0 through 2.4 STABLE3. Solution: Update to version 2.4 STABLE4 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2002-0068 BugTraq ID: 4148 http://www.securityfocus.com/bid/4148 Bugtraq: 20020221 Squid HTTP Proxy Security Update Advisory 2002:1 (Google Search) http://marc.info/?l=bugtraq&m=101431040422095&w=2 Bugtraq: 20020222 Squid buffer overflow (Google Search) http://marc.info/?l=bugtraq&m=101440163111826&w=2 Bugtraq: 20020222 TSLSA-2002-0031 - squid (Google Search) http://marc.info/?l=bugtraq&m=101443252627021&w=2 http://www.caldera.com/support/security/advisories/CSSA-2002-010.0.txt Caldera Security Advisory: CSSA-2002-SCO.7 http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html Conectiva Linux advisory: CLA-2002:464 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464 FreeBSD Security Advisory: FreeBSD-SA-02:12 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-016.php http://www.osvdb.org/5378 http://www.redhat.com/support/errata/RHSA-2002-029.html SuSE Security Announcement: SuSE-SA:2002:008 (Google Search) http://www.novell.com/linux/security/advisories/2002_008_squid_txt.html http://www.iss.net/security_center/static/8258.php
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.