CVE-2002-0068 Memory corruption in n/a

What is CVE-2002-0068?

CVE-2002-0068 is a high-severity memory corruption vulnerability in Redhat Linux, published on 2 Apr 2003. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters.

Which versions are affected by CVE-2002-0068?

It affects 2 products.

Products include Redhat Linux, Squid Squid.

How do I fix CVE-2002-0068?

No fix has been published for CVE-2002-0068 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2002-0068 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2002-0068 exists.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in Redhat Linux

• CVE-2000-1220 Privilege escalation in n/a Critical 10.0
• CVE-2003-0248 Privilege escalation in n/a Critical 10.0
• CVE-1999-1542 Command injection in n/a Critical 10.0
• CVE-1999-1299 Privilege escalation in n/a Critical 10.0
• CVE-2000-0322 Command injection in n/a Critical 10.0

All Redhat Linux vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-jqrq-2m5q-qcch.