Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Gentoo: GLSA-200409-04 Normal: Squid Denial Of Service Due To NTLM Auth

gentoo
Calendar Grey September 2, 2004
Scroller Gentoo
The Gentoo Linux Security Advisory GLSA 200409-04 outlines vulnerabilities in Squid affecting NTLM authentication, suggesting updates and config tweaks for mitigation
Squid is vulnerable to a denial of service attack which could crash its NTLM helpers.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200409-04
                                            https://security.gentoo.org/

  Severity: Normal
     Title: Squid: Denial of service when using NTLM authentication
      Date: September 02, 2004
      Bugs: #61280
        ID: 200409-04


Synopsis
=======
Squid is vulnerable to a denial of service attack which could crash its
NTLM helpers.

Background
=========
Squid is a full-featured Web Proxy Cache designed to run on Unix
systems. It supports proxying and caching of HTTP, FTP, and other URLs,
as well as SSL support, cache hierarchies, transparent caching, access
control lists and many other features.

Affected packages
================
    -------------------------------------------------------------------
     Package          /   Vulnerable   /                    Unaffected
    -------------------------------------------------------------------
  1  www-proxy/squid      ...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory denial of service gentoo squid service disruption normal severity ntlm authentication

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory denial of service gentoo squid service disruption normal severity ntlm authentication

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround