Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-0541
HistoryAug 06, 2004 - 4:00 a.m.

CVE-2004-0541

2004-08-0604:00:00
[email protected]
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.963 High

EPSS

Percentile

99.6%

JSON

Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password (“pass” variable).

Affected configurations

NVD
Node
national_science_foundationsquid_web_proxy_cacheMatch2.5_stable
OR
national_science_foundationsquid_web_proxy_cacheMatch3_pre

Related

packetstorm 1
nessus 9
cve 1
freebsd 1
gentoo 1
openvas 4
cvelist 1
debiancve 1
securityvulns 1
redhat 1
ubuntucve 1
suse 1
packetstorm
packetstorm
Squid NTLM Authenticate Overflow
2009-10-27 00:00:00
nessus
nessus
Mandrake Linux Security Advisory : squid (MDKSA-2004:059)
2004-07-31 00:00:00
Fedora Core 2 : squid-2.5.STABLE5-4.fc2 (2004-164)
2004-07-23 00:00:00
Squid ntlm_check_auth Function NTLM Authentication Helper Password Handling Remote Overflow
2004-06-30 00:00:00
cve
cve
CVE-2004-0541
2004-08-06 04:00:00
freebsd
freebsd
Buffer overflow in Squid NTLM authentication helper
2004-05-20 00:00:00
gentoo
gentoo
Squid: NTLM authentication helper buffer overflow
2004-06-17 00:00:00
openvas
openvas
FreeBSD Ports: squid
2008-09-04 00:00:00
FreeBSD Ports: squid
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200406-13 (squid)
2008-09-24 00:00:00
cvelist
cvelist
CVE-2004-0541
2004-06-10 04:00:00
debiancve
debiancve
CVE-2004-0541
2004-08-06 04:00:00
securityvulns
securityvulns
[Full-Disclosure] iDEFENSE Security Advisory 06.08.04: Squid Web Proxy Cache NTLM Authentication Helper Buffer Overflow Vulnerability
2004-06-09 00:00:00
redhat
redhat
(RHSA-2004:242) squid security update
2004-06-09 00:00:00
ubuntucve
ubuntucve
CVE-2004-0541
2004-08-06 00:00:00
suse
suse
remote system compromise in squid
2004-06-09 14:47:16

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.963 High

EPSS

Percentile

99.6%

JSON
Related for NVD:CVE-2004-0541
packetstorm1nessus9cve1freebsd1gentoo1openvas4cvelist1debiancve1securityvulns1redhat1ubuntucve1suse1