CVE-2002-2414

Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority (CA) certificate from a site and establishing a subsequent HTTPS connection, which allows remote attackers to cause a denial of service (crash).
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:opera_software:opera:6.0.3:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*

History

20 Nov 2024, 23:43

Type Values Removed Values Added
References () http://marc.info/?l=full-disclosure&m=103783186608438&w=2 - () http://marc.info/?l=full-disclosure&m=103783186608438&w=2 -
References () http://www.iss.net/security_center/static/10673.php - () http://www.iss.net/security_center/static/10673.php -
References () http://www.securityfocus.com/bid/6218 - () http://www.securityfocus.com/bid/6218 -

Information

Published : 2002-12-31 05:00

Updated : 2024-11-20 23:43


NVD link : CVE-2002-2414

Mitre link : CVE-2002-2414

CVE.ORG link : CVE-2002-2414


JSON object : View

Products Affected

opera_software

  • opera

squid

  • squid