CVE-2004-0541 Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary co...
HighCVSS 10.0
EPSS 71.1%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| national science foundation squid web proxy cache | = 2.5_stable | No fix listed |
| national science foundation squid web proxy cache | = 3_pre | No fix listed |
| debian/squid(Debian:12) | < 2.5.5-5 | 2.5.5-5 |
| debian/squid(Debian:13) | < 2.5.5-5 | 2.5.5-5 |
| debian/squid(Debian:14) | < 2.5.5-5 | 2.5.5-5 |
References
- Debian Security Tracker CVE-2004-0541 vendor-advisory
- FLSA-2006:152809 vendor-advisory
- GLSA-200406-13 patch vendor-advisory
- www.idefense.com patch vendor-advisory
- MDKSA-2004:059 vendor-advisory
- RHSA-2004:242 patch vendor-advisory
- 10500 vdb-entry
- 2004-0033 vendor-advisory
- squid-ntlm-bo(16360) vdb-entry
- oval:org.mitre.oval:def:10722 signature vdb-entry
- oval:org.mitre.oval:def:980 signature vdb-entry