QwikSec

Security Database

CVE

CWE

Training

CVE-2004-0832

Published: Sep 28, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attackers to cause a denial of service (application crash) via an NTLMSSP packet that causes a negative value to be passed to memcpy.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www1.uk.squid-cache.org/squid/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-ntlm_fetch_string

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

http://www.squid-cache.org/bugs/show_bug.cgi?id=1045

x_refsource_CONFIRM

vendor-advisory

x_refsource_GENTOO

FLSA-2006:152809

vendor-advisory

x_refsource_FEDORA

vendor-advisory

x_refsource_TRUSTIX

oval:org.mitre.oval:def:10489

vdb-entry

signature

x_refsource_OVAL

squid-ntlmssp-dos(17218)

vdb-entry

x_refsource_XF

vendor-advisory

x_refsource_MANDRAKE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.