Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2004-0832
HistoryNov 03, 2004 - 5:00 a.m.

CVE-2004-0832

2004-11-0305:00:00
[email protected]
web.nvd.nist.gov
35
squid
ntlm
authentication
vulnerability
cve-2004-0832

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.4 Medium

AI Score

Confidence

Low

0.036 Low

EPSS

Percentile

91.6%

JSON

The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attackers to cause a denial of service (application crash) via an NTLMSSP packet that causes a negative value to be passed to memcpy.

Affected configurations

NVD
Node
squidsquidRange≤2.5.6
CPENameOperatorVersion
squid:squidsquidle2.5.6

Related

nessus 5
openvas 5
redhat 1
gentoo 1
debiancve 1
freebsd 1
cvelist 1
ubuntucve 1
securityvulns 1
nvd 1
ubuntu 1
suse 3
nessus
nessus
GLSA-200409-04 : Squid: Denial of service when using NTLM authentication
2004-09-03 00:00:00
RHEL 3 : squid (RHSA-2004:462)
2004-10-02 00:00:00
FreeBSD : squid -- NTLM authentication denial-of-service vulnerability (064225c5-1f53-11d9-836a-0090962cff2a)
2005-07-13 00:00:00
openvas
openvas
FreeBSD Ports: squid
2008-09-04 00:00:00
FreeBSD Ports: squid
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200409-04 (squid)
2008-09-24 00:00:00
redhat
redhat
(RHSA-2004:462) squid security update
2004-09-30 00:00:00
gentoo
gentoo
Squid: Denial of service when using NTLM authentication
2004-09-02 00:00:00
debiancve
debiancve
CVE-2004-0832
2004-11-03 05:00:00
freebsd
freebsd
squid -- NTLM authentication denial-of-service vulnerability
2004-08-18 00:00:00
cvelist
cvelist
CVE-2004-0832
2004-09-28 04:00:00
ubuntucve
ubuntucve
CVE-2004-0832
2004-11-03 00:00:00
securityvulns
securityvulns
MDKSA-2004:093 - Updated squid packages fix DoS vulnerability
2004-09-16 00:00:00
nvd
nvd
CVE-2004-0832
2004-11-03 05:00:00
ubuntu
ubuntu
squid vulnerabilities
2004-11-07 00:00:00
suse
suse
remote code execution in gtk2, gdk-pixbuf
2004-09-17 10:02:50
remote command execution in XFree86-libs, xshared
2004-09-17 13:37:17
remote denial-of-service in apache2
2004-09-15 15:46:39

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.4 Medium

AI Score

Confidence

Low

0.036 Low

EPSS

Percentile

91.6%

JSON
Related for CVE-2004-0832
nessus5openvas5redhat1gentoo1debiancve1freebsd1cvelist1ubuntucve1securityvulns1nvd1ubuntu1suse3