CVE-2004-0541: Buffer Overflow
Buffer overflow in the ntlmcheckauth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable).
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0541?
CVE-2004-0541 is considered a high-severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2004-0541?
To fix CVE-2004-0541, upgrade to a non-vulnerable version of Squid Web Proxy Cache that does not allow NTLM authentication or ensure that NTLM handlers are not enabled.
Who is affected by CVE-2004-0541?
CVE-2004-0541 affects users of Squid Web Proxy Cache versions 2.5.x and 3.x with NTLM handlers enabled.
What type of attack is facilitated by CVE-2004-0541?
CVE-2004-0541 facilitates a buffer overflow attack allowing remote attackers to execute arbitrary code.
When was CVE-2004-0541 disclosed?
CVE-2004-0541 was disclosed in 2004, highlighting vulnerabilities in older versions of Squid Web Proxy Cache.