PT-2004-1650 · Squid · Squid Web Proxy Cache

Publicado 2004-06-10 · Atualizado 2018-05-03 · CVE-2004-0541

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Squid Web Proxy Cache versions 2.5.x through 3.x

Description The issue is related to a buffer overflow in the ntlm check auth function, which is used for NTLM authentication. This allows remote attackers to execute arbitrary code by providing a long password, specifically through the pass variable.

Recommendations For Squid Web Proxy Cache versions 2.5.x through 3.x, consider disabling NTLM authentication until a patch is available. Restrict access to the ntlm check auth function to minimize the risk of exploitation. Avoid using long passwords, especially those that could trigger the buffer overflow, until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2004-0541

RHSA-2004:242

Produtos afetados

Squid Web Proxy Cache

Referências · 18

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/proxy/squid_ntlm_authenticate.rb · Exploit
• 🔥 https://exploit-db.com/exploits/9951 · Exploit
• 🔥 https://exploit-db.com/exploits/16847 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2004-0541 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0541 · Nota de Segurança
• http://fedoranews.org/updates/FEDORA--.shtml · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A980 · Nota
• http://idefense.com/application/poi/display?id=107&type=vulnerabilities · Aviso do Fabricante
• http://trustix.net/errata/2004/0033 · Aviso do Fabricante
• http://gentoo.org/security/en/glsa/glsa-200406-13.xml · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2004-0541 · Aviso do Fabricante
• http://mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:059 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16360 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10722 · Nota
• http://securityfocus.com/bid/10500 · Nota