{ "schema_version": "1.4.0", "id": "GHSA-c92g-qcfc-4869", "modified": "2022-05-03T03:13:06Z", "published": "2022-05-03T03:13:06Z", "aliases": [ "CVE-2004-0541" ], "details": "Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password (\"pass\" variable).", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0541" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16360" }, { "type": "WEB", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10722" }, { "type": "WEB", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A980" }, { "type": "WEB", "url": "http://fedoranews.org/updates/FEDORA--.shtml" }, { "type": "WEB", "url": "http://www.gentoo.org/security/en/glsa/glsa-200406-13.xml" }, { "type": "WEB", "url": "http://www.idefense.com/application/poi/display?id=107&type=vulnerabilities" }, { "type": "WEB", "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:059" }, { "type": "WEB", "url": "http://www.redhat.com/support/errata/RHSA-2004-242.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/10500" }, { "type": "WEB", "url": "http://www.trustix.net/errata/2004/0033" } ], "database_specific": { "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2004-08-06T04:00:00Z" } }