CVE-2002-0714 Security feature bypass in n/a

High 7.5 Published 2 Apr 2003 Updated 8 Aug 2024

Remote attackers can bypass firewall rules or spoof FTP responses by exploiting missing IP validation in the Squid FTP proxy.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2002-0714?

CVE-2002-0714 is a high-severity vulnerability in n/a, published on 2 Apr 2003. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses.

Which versions are affected by CVE-2002-0714?

It affects 1 product.

Products include Squid Squid.

How do I fix CVE-2002-0714?

Upgrade to a fixed version.

Is CVE-2002-0714 being exploited?

There is no known exploitation of CVE-2002-0714 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2002-0714, GHSA-pqhg-h683-23rw.