VULNERABILITY INTELLIGENCE
CVE-2002-0714
CVSS score7.5 HIGH
EPSS probability2.75%
CISA KEVNot currently listed
Published2002-07-26
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses.
Primary references
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org — Patch
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Patch