CVE-2005-0097 — Squid vulnerability

8 documents7 sources

Severity

5.0MEDIUMNVD

EPSS

48.3%

top 2.25%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Squid Debian Squid

Timeline

PublishedJan 11

Latest updateMay 1

Description

The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type 3 message that triggers a NULL dereference.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages3 packages

▶debiandebian/squid< squid 2.5.7-4 (bookworm)

▶Debiansquid/squid< 2.5.7-4+3

▶NVDsquid/squid27 versions+26

Patches

Patch: secunia.com ↗Patch: security.gentoo.org ↗Patch: www.novell.com ↗

🔴Vulnerability Details

GHSA

GHSA-gfx6-98p8-rj23: The NTLM component in Squid 2↗2022-05-01

▶

OSV

CVE-2005-0097: The NTLM component in Squid 2↗2005-01-11

▶

📋Vendor Advisories

Ubuntu

Squid vulnerabilities↗2005-01-21

▶

Red Hat

security flaw↗2005-01-08

▶

Debian

CVE-2005-0097: squid - The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to c...↗2005

▶

💬Community

Bugzilla

CVE-2005-0097 security flaw↗2018-08-16

▶

Bugzilla

Squid Multiple Vulnerabilities (CVE-2004-0541 CVE-2004-0832 CVE-2004-0918 CVE-2005-0094 CVE-2005-0095 CVE-2005-0096 CVE-2005-0097 CVE-2005-0446 CVE-2005-0626 CVE-2005-0718 CVE-1999-0710 CVE-2005-1345↗2004-10-11

▶