CVE-2002-0713
Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service ...
CVE-2002-0713 is a high vulnerability (CVSS 7.5) in Squid, published July 23, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.54%, the 92nd percentile. Fixed in squid 2.4.6-2.
Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated.
- Record
CVE-2002-0713- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated.
- Record
CVE-2002-0713- Updated
- 2026-11-02
EUVDEUVD-2002-0705 No score
Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated.
- Record
EUVD-2002-0705- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8hcw-fv7v-vpjj No score
Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service ...
Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated.
- Record
GHSA-8hcw-fv7v-vpjj- Updated
- 2026-11-02
OSV No score
Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated.
- Record
CVE-2002-0713- Updated
- 2026-11-02
OSVDEBIAN-CVE-2002-0713 No score
Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated.
- Record
DEBIAN-CVE-2002-0713- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
iss.net/security_center/static/9481.php
marc.info?l=bugtraq&m=102674543407606&w=2
securityfocus.com/bid/5157
squid-cache.org/Versions/v2/2.4/bugs
Show 9 moreShow less
rhn.redhat.com/errata/RHSA-2002-051.html
linux-mandrake.com/en/security/2002/MDKSA-2002-044.php
nvd.nist.gov/vuln/detail/CVE-2002-0713
github.com/advisories/GHSA-8hcw-fv7v-vpjj
security-tracker.debian.org/tracker/CVE-2002-0713