Detections
Analytics

Squid Remote NTLM Authentication Password Handling Remote Overflow

high Log Correlation Engine Plugin ID 801046

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote server is running a Squid proxy server. This version is reported vulnerable to a remote buffer overflow in the NTLM authentication routine. Exploitation of this vulnerability can allow remote attackers to gain access to confidential data.

Solution

Upgrade or patch according to vendor recommendations.

See Also

http://.squid-cache.org

labs.idefense.com/intelligence/vulnerabilities/display.php?id=107

Plugin Details

Severity: High

ID: 801046

Family: Web Servers

Nessus ID: 12294

Exploitable With

Metasploit (Squid NTLM Authenticate Overflow)

Reference Information

CVE: CVE-2004-0541

BID: 10500