QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2004-0541

Back to search

CVE-2004-0541

Published: Jun 10, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable).

VendorProductVersions

n/a

n/a

affected
n/a

References

oval:org.mitre.oval:def:10722
vdb-entry
signature
x_refsource_OVAL
RHSA-2004:242
vendor-advisory
x_refsource_REDHAT
GLSA-200406-13
vendor-advisory
x_refsource_GENTOO
MDKSA-2004:059
vendor-advisory
x_refsource_MANDRAKE
FLSA-2006:152809
vendor-advisory
x_refsource_FEDORA
squid-ntlm-bo(16360)
vdb-entry
x_refsource_XF
10500
vdb-entry
x_refsource_BID
2004-0033
vendor-advisory
x_refsource_TRUSTIX
oval:org.mitre.oval:def:980
vdb-entry
signature
x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now