CVE Vulnerabilities

CVE-2002-2414

Published: Dec 31, 2002 | Modified: Oct 18, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority (CA) certificate from a site and establishing a subsequent HTTPS connection, which allows remote attackers to cause a denial of service (crash).

Affected Software

Name Vendor Start Version End Version
Opera Opera_software 6.0.3 (including) 6.0.3 (including)
Squid Squid 2.4 (including) 2.4 (including)

References