FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

squid -- NTLM authentication denial-of-service vulnerability

Affected packages
squid < 2.5.7

Details

VuXML ID 064225c5-1f53-11d9-836a-0090962cff2a
Discovery 2004-08-18
Entry 2004-10-18

A remote attacker is able to cause a denial-of-service situation, when NTLM authentication is enabled in squid. NTLM authentication uses two functions which lack correct offset checking.

References

CVE Name CVE-2004-0832
URL http://www.squid-cache.org/bugs/show_bug.cgi?id=1045