ByteOS Network

CVE Vulnerability Details :

CVE-2004-0541

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-10 Jun, 2004 | 04:00

Updated At-08 Aug, 2024 | 00:24

▼CVE Numbering Authority (CNA)

Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable).

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10722	vdb-entry signature x_refsource_OVAL
http://www.redhat.com/support/errata/RHSA-2004-242.html	vendor-advisory x_refsource_REDHAT
http://www.gentoo.org/security/en/glsa/glsa-200406-13.xml	vendor-advisory x_refsource_GENTOO
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:059	vendor-advisory x_refsource_MANDRAKE
http://fedoranews.org/updates/FEDORA--.shtml	vendor-advisory x_refsource_FEDORA
http://www.idefense.com/application/poi/display?id=107&type=vulnerabilities	x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/16360	vdb-entry x_refsource_XF
http://www.securityfocus.com/bid/10500	vdb-entry x_refsource_BID
ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc	vendor-advisory x_refsource_SGI
http://www.trustix.net/errata/2004/0033/	vendor-advisory x_refsource_TRUSTIX
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A980	vdb-entry signature x_refsource_OVAL

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10722

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.redhat.com/support/errata/RHSA-2004-242.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-200406-13.xml

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:059

Resource:

vendor-advisory

x_refsource_MANDRAKE

Hyperlink: http://fedoranews.org/updates/FEDORA--.shtml

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://www.idefense.com/application/poi/display?id=107&type=vulnerabilities

Resource:

x_refsource_MISC

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/16360

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://www.securityfocus.com/bid/10500

Resource:

vdb-entry

x_refsource_BID

Hyperlink: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc

Resource:

vendor-advisory

x_refsource_SGI

Hyperlink: http://www.trustix.net/errata/2004/0033/

Resource:

vendor-advisory

x_refsource_TRUSTIX

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A980

Resource:

vdb-entry

signature

x_refsource_OVAL

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10722	vdb-entry signature x_refsource_OVAL x_transferred
http://www.redhat.com/support/errata/RHSA-2004-242.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.gentoo.org/security/en/glsa/glsa-200406-13.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:059	vendor-advisory x_refsource_MANDRAKE x_transferred
http://fedoranews.org/updates/FEDORA--.shtml	vendor-advisory x_refsource_FEDORA x_transferred
http://www.idefense.com/application/poi/display?id=107&type=vulnerabilities	x_refsource_MISC x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/16360	vdb-entry x_refsource_XF x_transferred
http://www.securityfocus.com/bid/10500	vdb-entry x_refsource_BID x_transferred
ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc	vendor-advisory x_refsource_SGI x_transferred
http://www.trustix.net/errata/2004/0033/	vendor-advisory x_refsource_TRUSTIX x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A980	vdb-entry signature x_refsource_OVAL x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10722

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2004-242.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-200406-13.xml

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:059

Resource:

vendor-advisory

x_refsource_MANDRAKE

x_transferred

Hyperlink: http://fedoranews.org/updates/FEDORA--.shtml

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://www.idefense.com/application/poi/display?id=107&type=vulnerabilities

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/16360

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://www.securityfocus.com/bid/10500

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc

Resource:

vendor-advisory

x_refsource_SGI

x_transferred

Hyperlink: http://www.trustix.net/errata/2004/0033/

Resource:

vendor-advisory

x_refsource_TRUSTIX

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A980

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References