Moderate: Red Hat Security Advisory: squid security update

An updated squid package that fixes a security vulnerability as well as several issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, a...

Ubuntu 4.10 : squid vulnerabilities (USN-67-1)

infamous41md discovered several Denial of Service vulnerabilities in squid. A malicious Gopher server could crash squid by sending a line bigger than 4096 bytes. CAN-2005-0094 If squid is configured to send WCPP Web Cache Communication Protocol messages to a 'home router', an attacker who was abl...

Ubuntu 4.10 : squid vulnerabilities (USN-19-1)

Recently, two Denial of Service vulnerabilities have been discovered in squid, a WWW proxy cache. Insufficient input validation in the NTLM authentication handler allowed a remote attacker to crash the service by sending a specially crafted NTLMSSP packet. Likewise, due to an insufficient...

Mandrake Linux Security Advisory : wget (MDKSA-2005:183)

A vulnerability in libcurl's NTLM function can overflow a stack-based buffer if given too long a user name or domain name in NTLM authentication is enabled and either a pass a user and domain name to libcurl that together are longer than 192 bytes or b allow libcurl to follow HTTP redirects and t...

Ubuntu 4.10 / 5.04 / 5.10 : curl, wget vulnerabilities (USN-205-1)

A buffer overflow has been found in the NTLM authentication handler of the Curl library and wget. By tricking an user or automatic system that uses the Curl library, the curl application, or wget into visiting a specially crafted website, a remote attacker could exploit this to execute arbitrary...

Ubuntu 4.10 : curl vulnerability (USN-86-1)

infamous41md discovered a buffer overflow in cURL's NT LAN Manager NTLM authentication handling. By sending a specially crafted long NTLM reply packet, a remote attacker could overflow the reply buffer. This could lead to execution of arbitrary attacker specified code with the privileges of the...

Eudora Internet Mail Server < 3.2.8 NTLM Authentication Request DoS

Binary data 3361.prm...

Authentication flaw

Qualcomm Eudora Internet Mail Server EIMS before 3.2.8 allows remote attackers to cause a denial of service crash via 1 malformed NTLM authentication requests, or a malformed 2 Incoming Mail X or 3 Temporary Mail file...

CVE-2006-0141

Qualcomm Eudora Internet Mail Server EIMS before 3.2.8 allows remote attackers to cause a denial of service crash via 1 malformed NTLM authentication requests, or a malformed 2 Incoming Mail X or 3 Temporary Mail file...

CVE-2006-0141

Qualcomm Eudora Internet Mail Server EIMS before 3.2.8 allows remote attackers to cause a denial of service crash via 1 malformed NTLM authentication requests, or a malformed 2 Incoming Mail X or 3 Temporary Mail file...

CVE-2006-0141

CVE-2006-0141 affects Qualcomm’s Eudora Internet Mail Server (EIMS) prior to version 3.2.8. The vulnerability allows remote denial of service (crash) via: (1) malformed NTLM authentication requests, (2) a malformed Incoming Mail X, or (3) a malformed Temporary Mail file. The issue is documented a...

wget / curl buffer overflow

Buffer overflow on client NTLM authentication...

Slackware 10.0 / 10.1 / 10.2 / 8.1 / 9.0 / 9.1 / current : curl/wget (SSA:2005-310-01)

New curl packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and -current, and new wget packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current. These address a buffer overflow in NTLM handling which may present a security problem, though no public exploits are...

curl/wget

New curl packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and -current, and new wget packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current. These address a buffer overflow in NTLM handling which may present a security problem, though no public exploits are...

RHEL 2.1 / 3 / 4 : wget (RHSA-2005:812)

Updated wget packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use either the HTTP or FTP protocols. A stack based buffer overflow bug was found ...

wget security update

CentOS Errata and Security Advisory CESA-2005:812-00 Updated wget packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use either the HTTP or FTP...

openssl096b, wget security update

CentOS Errata and Security Advisory CESA-2005:830 Updated wget packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use either the HTTP or FTP...

wget security update

CentOS Errata and Security Advisory CESA-2005:812 Updated wget packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use either the HTTP or FTP...

Important: Red Hat Security Advisory: wget security update

Updated wget packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use either the HTTP or FTP protocols. A stack based buffer overflow bug was found ...

SUSE-SA:2005:063: curl, wget

The remote host is missing the patch for the advisory SUSE-SA:2005:063 curl, wget. This update fixes a stack-based buffer overflow in the NTLM authentication code used by the file download tools/libraries curl and wget that can be triggered by using a long user or domain name also works with HTTP...