CVE-2004-0541

Related Files

Squid NTLM Authenticate Overflow

Posted Oct 27, 2009

Authored by skape

This is an exploit for Squid's NTLM authenticate overflow (libntlmssp.c). Due to improper bounds checking in ntlm_check_auth, it is possible to overflow the 'pass' variable on the stack with user controlled data of a user defined length.

tags | exploit, overflow

advisories | CVE-2004-0541

SHA-256 | c43f943216a1703933afd0ce0708c0542f099b2ad7ed5a159c445291d16c2bc5

Download | Favorite | View

iDEFENSE Security Advisory 2004-06-08.t

Posted Jun 10, 2004

Authored by iDefense Labs | Site idefense.com

iDEFENSE Security Advisory 06.08.04: A remote attacker can compromise a target system if Squid Proxy is configured to use the NTLM authentication helper. The attacker can send an overly long password to overflow the buffer and execute arbitrary code.

tags | advisory, remote, overflow, arbitrary

advisories | CVE-2004-0541

SHA-256 | 5eeaa170fb736208161866b9b915659dd2b08d182ea719bbcd682afa10efcdcb

Download | Favorite | View