Curl < 7.13.1 NTLM Stack-based Buffer Overflow

Binary data 2640.prm...

CURL-CVE-2005-0490 Authentication Buffer Overflows

Due to bad usage of the base64 decode function to a stack-based buffer without checking the data length, it was possible for a malicious HTTP server to overflow the client during NTLM negotiation and for an FTP server to overflow the client during krb4 negotiation. The announcement of this flaw w...

Authentication Buffer Overflows

Due to bad usage of the base64 decode function to a stack-based buffer without checking the data length, it was possible for a malicious HTTP server to overflow the client during NTLM negotiation and for an FTP server to overflow the client during krb4 negotiation. The announcement of this flaw w...

CVE-2005-0490

Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by 1 the Curlinputntlm functio...

CVE-2005-0490

Multiple stack-based buffer overflows in libcURL and curl 7.12.1, enabling remote code execution via base64 replies, are described in the CVE-2005-0490 entry and linked F5 BIG-IP advisory SOL4447. The issue stems from improper handling in NTLM authentication (Curl_input_ntlm in http_ntlm.c) and K...

CVE-2005-0490

Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by 1 the Curlinputntlm functio...

GLSA-200501-25 : Squid: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200501-25 Squid: Multiple vulnerabilities Squid contains a vulnerability in the gopherToHTML function CAN-2005-0094 and incorrectly checks the 'number of caches' field when parsing WCCPISEEYOU messages CAN-2005-0095. Furthermore t...

SUSE-SA:2005:006: squid

The remote host is missing the patch for the advisory SUSE-SA:2005:006 squid. Squid is a feature-rich web-proxy with support for various web-related protocols. The last two squid updates from February the 1st and 10th fix several vulnerabilities. The impact of them range from remote...

CVE-2005-0147

CVE-2005-0147 affects Firefox before 1.0 and Mozilla before 1.7.5 when configured to use a proxy, enabling a remote attacker to steal NTLM or SPNEGO credentials by eliciting 407 proxy authentication requests. The issue is caused by the browser’s handling of proxy auth prompts, allowing credential...

CVE-2005-0096

Memory leak in the NTLM fakeauthauth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service memory consumption...

USN-67-1: Squid vulnerabilities

infamous41md discovered several Denial of Service vulnerabilities in squid. A malicious Gopher server could crash squid by sending a line bigger than 4096 bytes. CAN-2005-0094 If squid is configured to send WCPP Web Cache Communication Protocol messages to a "home router", an attacker who was abl...

CVE-2005-0097

The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service crash via a malformed NTLM type 3 message that triggers a NULL dereference...

CVE-2005-0096

Memory leak in the NTLM fakeauthauth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service memory consumption...

CVE-2005-0096

CVE-2005-0096 affects Squid 2.5.STABLE7 and earlier, where a memory leak in the NTLM fakeauth_auth helper can cause a denial of service through unbounded memory growth. The vulnerability is triggered remotely via the network. Connected advisories/entries show remediation efforts for Squid (e.g., ...

CVE-2005-0096

Memory leak in the NTLM fakeauthauth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service memory consumption...

CVE-2005-0097

CVE-2005-0097 affects the NTLM component in Squid 2.5.STABLE7 and earlier, enabling a remote denial-of-service crash via a malformed NTLM type 3 message that triggers a NULL dereference. The connected records corroborate impact across multiple vendors/distros (e.g., Red Hat RHSA-2005:060/061, Gen...

Squid NTLM Component fakeauth Multiple Remote DoS

The remote SQUID server, an open source Proxy server, is vulnerable to a Denial of Service in the fakeauth NTLM authentication module. Exploitation of this bug can allow remote attackers to deny access to legitimate users. Squid 2.5-STABLE are reported vulnerable. C Tenable Network Security, Inc...

CVE-2005-0097

The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service crash via a malformed NTLM type 3 message that triggers a NULL dereference...

CVE-2005-0097

The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service crash via a malformed NTLM type 3 message that triggers a NULL dereference...

CVE-2005-0097

The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service crash via a malformed NTLM type 3 message that triggers a NULL dereference...