VDB
CVE-2004-0832
CVE-2004-0832
PUBLISHED
CVSS 5 MEDIUM
The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attackers to cause a denial of service (application crash) via an NTLMSSP packet that causes a negative value to be passed to memcpy.
EPSS 10.37% · 95.7th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
10.37%
95.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| squid | squid | 0 |
Timeline
- Sep 28, 2004 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Sep 5, 2023 EPSS Score
- Sep 9, 2023 EPSS Score
References
- squid-ntlmssp-dos(17218) vdb
- 2004-0047 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2004-0832 advisory
- http://fedoranews.org/updates/FEDORA--.shtml url
- http://www.squid-cache.org/bugs/show_bug.cgi?id=1045 url
- http://www.trustix.org/errata/2004/0047 url
- http://www1.uk.squid-cache.org/squid/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-ntlm_fetch_string technical
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10489 technical
- http://www.gentoo.org/security/en/glsa/glsa-200409-04.xml patch
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:093 technical
- http://www.securityfocus.com/bid/11098 patch