CVE-2004-0832: Medium severity Squid Squid vulnerability
Published Sep 28, 2004
·Updated
The (1) ntlmfetchstring and (2) ntlmgetstring functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attackers to cause a denial of service (application crash) via an NTLMSSP packet that causes a negative value to be passed to memcpy.
Affected Software
1 affected component
Squid Squid<=2.5.6
Remediation
Patch Available
Patch Available
Patch Available
Event History
Sep 28, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0832?
CVE-2004-0832 is classified as a high-severity vulnerability due to its potential to cause a denial of service.
2
How do I fix CVE-2004-0832?
To fix CVE-2004-0832, upgrade to Squid version 2.5.7 or later where the vulnerability has been addressed.
3
Which versions of Squid are affected by CVE-2004-0832?
CVE-2004-0832 affects Squid versions 2.5.6 and earlier.
4
What kind of attack does CVE-2004-0832 involve?
CVE-2004-0832 involves an attack that exploits NTLM authentication via crafted NTLMSSP packets to crash the application.
5
Is CVE-2004-0832 remotely exploitable?
Yes, CVE-2004-0832 can be remotely exploited by attackers to cause a denial of service.