NVD

Id
70973  
Name
CVE-2004-0541  
Description
Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable).  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-08-06  
Modified Date
2017-07-10  
Seq
2004-0541  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
366298 70973 CVE-2004-0541 20040604-01-U  View
366299 70973 CVE-2004-0541 FLSA-2006:152809  View
366300 70973 CVE-2004-0541 oval:org.mitre.oval:def:10722  View
366301 70973 CVE-2004-0541 oval:org.mitre.oval:def:980  View
366302 70973 CVE-2004-0541 GLSA-200406-13  View
366303 70973 CVE-2004-0541 http://www.idefense.com/application/poi/display?id=107&type=vulnerabilities  View
366304 70973 CVE-2004-0541 RHSA-2004:242  View
366305 70973 CVE-2004-0541 10500  View
366306 70973 CVE-2004-0541 2004-0033  View
366307 70973 CVE-2004-0541 squid-ntlm-bo(16360)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62877 JVNDB-2004-000219 Squid の ntlm_check_auth() 関数におけるバッファオーバーフローの脆弱性 Squid には、ntlm_check_auth() 関数において境界チェックを適切に行わないため、過度に長いパスワードを与えられた場合、バッファオーバーフローを発生する脆弱性が存在します。 CVE-2004-0541 8968 CVE-2004-0541 70973 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000219.html 2004-06-08 2007-04-01 View