CVE

Id
9260  
CVE No.
CVE-2004-0832  
Status
Candidate  
Description
The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attackers to cause a denial of service (application crash) via an NTLMSSP packet that causes a negative value to be passed to memcpy.  
Phase
Assigned (20040908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
61215 9260 CVE-2004-0832 CONFIRM:http://www1.uk.squid-cache.org/squid/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-ntlm_fetch_string  View
61216 9260 CVE-2004-0832 CONFIRM:http://www.squid-cache.org/bugs/show_bug.cgi?id=1045  View
61217 9260 CVE-2004-0832 FEDORA:FLSA-2006:152809  View
61218 9260 CVE-2004-0832 URL:http://fedoranews.org/updates/FEDORA--.shtml  View
61219 9260 CVE-2004-0832 GENTOO:GLSA-200409-04  View
61220 9260 CVE-2004-0832 URL:http://www.gentoo.org/security/en/glsa/glsa-200409-04.xml  View
61221 9260 CVE-2004-0832 MANDRAKE:MDKSA-2004:093  View
61222 9260 CVE-2004-0832 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:093  View
61223 9260 CVE-2004-0832 TRUSTIX:2004-0047  View
61224 9260 CVE-2004-0832 URL:http://www.trustix.org/errata/2004/0047/  View
61225 9260 CVE-2004-0832 BID:11098  View
61226 9260 CVE-2004-0832 URL:http://www.securityfocus.com/bid/11098  View
61227 9260 CVE-2004-0832 OVAL:oval:org.mitre.oval:def:10489  View
61228 9260 CVE-2004-0832 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10489  View
61229 9260 CVE-2004-0832 XF:squid-ntlmssp-dos(17218)  View

Related JVN