CVE-2002-0068
Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters.
- EPSS
- 9.4% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:linux
- squid:squid
References
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc
- http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464
- http://marc.info/?l=bugtraq&m=101431040422095&w=2
- http://marc.info/?l=bugtraq&m=101440163111826&w=2