CVE-2002-0714

N/A Unknown

Published: July 26, 2002 Modified: April 16, 2026

Description

FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000506

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=102674543407606&w=2

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2002-051.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2002-130.html

Source: cve@mitre.org

Patch Vendor Advisory

http://www.iss.net/security_center/static/9479.php

Source: cve@mitre.org

http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-044.php

Source: cve@mitre.org

Patch

http://www.osvdb.org/5924

Source: cve@mitre.org

http://www.securityfocus.com/bid/5158

Source: cve@mitre.org

http://www.squid-cache.org/Advisories/SQUID-2002_3.txt

Source: cve@mitre.org

Patch Vendor Advisory

http://www.squid-cache.org/Versions/v2/2.4/bugs/

Source: cve@mitre.org

Patch

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt