CVE-2002-0067: Red Hat Linux

High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days.

Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote attackers to bypass intended access restrictions.

Affected products

• Red Hat Linux: version 6.2 only; version 7.0 only; version 7.1 only; version 7.2 only
• Squid Squid: up to and including 2.4_stable_2

Published 2002-03-08. Last modified 2026-06-16.