2707 matches found
CVE-2005-2917
The CVE-2005-2917 issue affects the Squid proxy server (2.5.STABLE10 and earlier) during NTLM authentication, where certain crafted request sequences can crash the daemon. Impact described in multiple advisories: a remote attacker could terminate the Squid process, causing a denial of service wit...
CVE-2005-2917
Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service daemon restart...
CVE-2005-2917
Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service daemon restart...
Squid < 2.5.STABLE11 NTLM Authentication Header DoS
Binary data 3247.prm...
NuMega SoftICE Driver Studio authentication bypass
It's posible to access DriverStudio Remote Control with NTLM Null session...
squid -- possible denial of service condition regarding NTLM authentication
The squid patches page notes: Squid may crash with the above error FATAL: Incorrect scheme in auth header when given certain request sentences. Workaround: disable NTLM authentication...
FreeBSD : squid -- NTLM authentication denial-of-service vulnerability (064225c5-1f53-11d9-836a-0090962cff2a)
A remote attacker is able to cause a denial-of-service situation, when NTLM authentication is enabled in squid. NTLM authentication uses two functions which lack correct offset checking. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...
FreeBSD : curl -- authentication buffer overflow vulnerability (96df5fd0-8900-11d9-aa18-0001020eed82)
Two iDEFENSE Security Advisories reports : An exploitable stack-based buffer overflow condition exists when using NT Lan Manager NTLM authentication. The problem specifically exists within Curlinputntlm defined in lib/httpntlm.c. Successful exploitation allows remote attackers to execute arbitrar...
PT-2005-2453 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.10.11 Description: The issue affects multiple dissectors in Ethereal, including AIM, LDAP, FibreChannel, GSM MAP, SRVLOC, and NTLMSSP. These vulnerabilities allow remote attackers to cause a denial of service,...
CVE-2005-0147
Firefox before 1.0 and Mozilla before 1.7.5, when configured to use a proxy, respond to 407 proxy auth requests from arbitrary servers, which allows remote attackers to steal NTLM or SPNEGO credentials...
CVE-2005-0147
Firefox before 1.0 and Mozilla before 1.7.5, when configured to use a proxy, respond to 407 proxy auth requests from arbitrary servers, which allows remote attackers to steal NTLM or SPNEGO credentials...
CVE-2005-0490
Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by 1 the Curlinputntlm functio...
CVE-2005-0490
Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by 1 the Curlinputntlm functio...
CVE-2000-1217
Microsoft Windows 2000 before Service Pack 2 SP2, when running in a non-Windows 2000 domain and using NTLM authentication, and when credentials of an account are locally cached, allows local users to bypass account lockout policies and make an unlimited number of login attempts, aka the "Domain...
CVE-2000-1217
Microsoft Windows 2000 before SP2, in a non-Windows 2000 domain using NTLM and with cached credentials, is vulnerable to Domain Account Lockout: local users can bypass lockout and make unlimited login attempts. Affected component is the account lockout mechanism; root cause relates to how local c...
security flaw
Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by 1 the Curlinputntlm functio...
GLSA-200503-20 : curl: NTLM response buffer overflow
The remote host is affected by the vulnerability described in GLSA-200503-20 curl: NTLM response buffer overflow curl fails to properly check boundaries when handling NTLM authentication. Impact : With a malicious server an attacker could send a carefully crafted NTLM response to a connecting...
curl: NTLM response buffer overflow
Background curl is a command line tool for transferring files via many different protocols. Description curl fails to properly check boundaries when handling NTLM authentication. Impact With a malicious server an attacker could send a carefully crafted NTLM response to a connecting client leading...
SUSE-SA:2005:011: curl
The remote host is missing the patch for the advisory SUSE-SA:2005:011 curl. [email protected] reported a vulnerability in libcurl, the HTTP/FTP retrieval library. This library is used by lots of programs, including YaST2 and PHP4. The NTLM authorization in curl had a buffer overflow in the...