CVE-2002-0067

Опубликовано: 08 мар. 2002

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote attackers to bypass intended access restrictions.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:squid:squid:*:*:*:*:*:*:*:*

Версия до 2.4_stable_2 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*

cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*

cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*

cpe:2.3:o:redhat:linux:7.0:*:alpha:*:*:*:*:*

cpe:2.3:o:redhat:linux:7.0:*:i386:*:*:*:*:*

cpe:2.3:o:redhat:linux:7.1:*:alpha:*:*:*:*:*

cpe:2.3:o:redhat:linux:7.1:*:i386:*:*:*:*:*

cpe:2.3:o:redhat:linux:7.1:*:ia64:*:*:*:*:*

cpe:2.3:o:redhat:linux:7.2:*:i386:*:*:*:*:*

cpe:2.3:o:redhat:linux:7.2:*:ia64:*:*:*:*:*

EPSS

Процентиль: 45%

0.00223

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2002-0067

redhat

больше 23 лет назад

Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote attackers to bypass intended access restrictions.

GHSA-vw6m-fc47-cf73

github

больше 3 лет назад

Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote attackers to bypass intended access restrictions.

EPSS

Процентиль: 45%

0.00223

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other