PT-2002-1737 · Squid · Squid+1

Published 2002-07-23 · Updated 2016-10-18 · CVE-2002-0715

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Squid versions prior to 2.4.STABLE6

Description The issue relates to proxy authentication credentials, potentially allowing remote web sites to obtain the user's proxy login and password.

Recommendations For versions prior to 2.4.STABLE6, update to version 2.4.STABLE6 or later to resolve the issue.

Fix

Related Identifiers

CVE-2002-0715

Affected Products

Squid

Squid Cache

References · 14

• http://squid-cache.org/Advisories/SQUID-2002_3.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0715 · Security Note
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2002-0715 · Vendor Advisory
• http://squid-cache.org/Versions/v2/2.4/bugs · Patch
• http://rhn.redhat.com/errata/RHSA-2002-051.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2002-0715 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2002-0715 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2002-130.html · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0715 · Note
• http://marc.info/?l=bugtraq&m=102674543407606&w=2 · Note
• http://linux-mandrake.com/en/security/2002/MDKSA-2002-044.php · Patch, Vendor Advisory
• http://securityfocus.com/bid/5154 · Note
• http://iss.net/security_center/static/9478.php · Note