Squid NTLM Buffer Overflow Vulnerability

Remote exploitation of a buffer overflow vulnerability in Squid Web Proxy Cache could allow a remote attacker to execute arbitrary code. Squid Web Proxy Cache supports Basic, Digest and NTLM authentication.


A remote attacker can compromise a target system if Squid Proxy is configured to use the NTLM authentication helper. The attacker can send an overly long password to overflow the buffer and execute arbitrary code.


http://seclists.org/lists/fulldisclosure/2004/Jun/0210.html

Related Entries

• Unauthorized photography in Trader Joes

  We don't really get much exposure to Trader Joes up here in Canada, but I remember loving it when I was visiting the U.S. Such...

• How to launder money

  You never know. This might be useful information someday. Like when a shopping bag full of money winds up on your doorstep. The Straight Dope:...

• Record Label â..Infringesâ.. Own Copyright

  Great, so ISPs are now pro-actively pulling down content. Maybe learn a little about how copyright works before doing this kind of thing. Record Label...

• John McCain asks YouTube to let him infringe copyright

  Oh snap. And we hate those bastards that stifle free speech, don't we? Stifled by Copyright, McCain Asks YouTube to Consider Fair Use | Threat...

• 2008 election copyright pledge candidates

  I'd just like to point out that Andrew Telegdi, Liberal MP, Kitchener-Waterloo, is not on this list yet, whereas Cindy Jacobsen, New Democrat candidate, Kitchener-Waterloo,...