medium4.3
CVE-2002-2414
Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority (CA) certificate from a site a…
Impact
Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority (CA) certificate from a site and establishing a subsequent HTTPS connection, which allows remote attackers to cause a denial of service (crash).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opera Software | Opera | Version 6.0.3 |
| Squid | Squid | Version 2.4 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=full-disclosure&m=103783186608438&w=2
- http://www.iss.net/security_center/static/10673.php
- http://www.securityfocus.com/bid/6218
- http://marc.info/?l=full-disclosure&m=103783186608438&w=2
- http://www.iss.net/security_center/static/10673.php
- http://www.securityfocus.com/bid/6218