Lucene search

K
cve[email protected]CVE-2002-0163
HistoryApr 02, 2003 - 5:00 a.m.

CVE-2002-0163

2003-04-0205:00:00
web.nvd.nist.gov
29
cve-2002-0163
buffer overflow
squid
dns responses
remote attacks
denial of service

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

High

0.306 Low

EPSS

Percentile

97.0%

Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via compressed DNS responses.

Affected configurations

NVD
Node
squidsquidRange2.4_9
CPENameOperatorVersion
squid:squidsquidle2.4_9

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

High

0.306 Low

EPSS

Percentile

97.0%

Related for CVE-2002-0163