PT-2004-1650 · Squid · Squid Web Proxy Cache

Published 2004-06-10 · Updated 2018-05-03 · CVE-2004-0541

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Squid Web Proxy Cache versions 2.5.x through 3.x

Description The issue is related to a buffer overflow in the ntlm check auth function, which is used for NTLM authentication. This allows remote attackers to execute arbitrary code by providing a long password, specifically through the pass variable.

Recommendations For Squid Web Proxy Cache versions 2.5.x through 3.x, consider disabling NTLM authentication until a patch is available. Restrict access to the ntlm check auth function to minimize the risk of exploitation. Avoid using long passwords, especially those that could trigger the buffer overflow, until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2004-0541

RHSA-2004:242

Affected Products

Squid Web Proxy Cache

References · 18

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/proxy/squid_ntlm_authenticate.rb · Exploit
• 🔥 https://exploit-db.com/exploits/9951 · Exploit
• 🔥 https://exploit-db.com/exploits/16847 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2004-0541 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0541 · Security Note
• http://fedoranews.org/updates/FEDORA--.shtml · Vendor Advisory
• http://idefense.com/application/poi/display?id=107&type=vulnerabilities · Vendor Advisory
• http://trustix.net/errata/2004/0033 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200406-13.xml · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2004-0541 · Vendor Advisory
• http://mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:059 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2004-242.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0541 · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A980 · Note