CVE-2002-2414 Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority (CA) certificate from a site and establishing a subsequent HTTPS connec...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority (CA) certificate from a site and establishing a subsequent HTTPS connection, which allows remote attackers to cause a denial of service (crash).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opera software opera | = 6.0.3 | No fix listed |
| squid | = 2.4 | No fix listed |
References
- 20021120 Opera 6.03/Linux crashes on HTTPS over Squid Proxy on a site mailing-list
- opera-squid-https-dos(10673) vdb-entry
- 6218 vdb-entry