squid: buffer overflow [LWN.net]

Package(s):

squid

CVE #(s):

CAN-2004-0541

Created:

June 9, 2004

Updated:

September 30, 2004

Description:

The NTLM authentication helper used by the squid proxy contains a buffer overflow vulnerability; an overly-long password may be used to run arbitrary code. Sites not using NTLM authentication are not vulnerable.

Alerts:

Red Hat	RHSA-2004:462-01	2004-09-30
Mandrake	MDKSA-2004:093	2004-09-15
Gentoo	200409-04	2004-09-02
Gentoo	200406-13	2004-06-17
Whitebox	WBSA-2004:242-01	2004-06-10
Trustix	TSLSA-2004-0033	2004-06-10
Mandrake	MDKSA-2004:059	2004-06-09
SuSE	SuSE-SA:2004:016	2004-06-09
Red Hat	RHSA-2004:242-01	2004-06-09
Fedora	FEDORA-2004-164	2004-06-09
Fedora	FEDORA-2004-163	2004-06-09

(Log in to post comments)