Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 556
Alerts This Week
Warning Icon 1 556

Red Hat: RHSA-2004:462-01 Critical: Squid NTLM Memory Issue

red hat
Calendar Grey September 30, 2004
Dist Redhat Esm H88
Important notification for Red Hat customers regarding a vulnerability in squid related to NTLM authentication, aimed at preserving system security.
An updated squid package that fixes a security vulnerability in the NTLM authentication helper is now available.

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system:

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/

5. Bug IDs fixed (http://bugzilla.redhat.com/ for more info):

131750 - CAN-2004-0832 Certain malformed NTLMSSP packets could crash the NTLM helpers provided by Squid

6. RPMs required:

Red Hat Enterprise Linux AS version 3:

SRPMS:

319a574d8ab2d7e1bfa454055f3f1933 squid-2.5.STABLE3-6.3E.1.src.rpm

i386: 3b46288783aacdd9842d43f221201c44 squid-2.5.STABLE3-6.3E.1.i386.rpm

ia64: e92e66c250e34497a397c53c33ae1c2b squid-2.5.STABLE3-6.3E.1.ia64.rpm

ppc: 726578556b36bb263526841add7dd9a2 squid-2.5.STABLE3-6.3E.1.ppc.rpm

s390: ce1c585636cfe7843f9188f283533800 squid-2.5.STABLE3-6.3E.1.s390.rpm

s390x: cd974ecba26d90d98a145e9813221dfb squid-2.5.STABLE3-6.3E.1.s390x.rpm

x86_64: 0c63d4747a0e6848cd69259b6e7648dd squid-2.5.STABLE3-6.3E.1.x86_64.rpm

Red Hat Desktop version 3:

SRPMS:

319a574d8ab2d7e1bfa454055f3f1933 squid-2.5.STABLE3-6.3E.1.src.rpm

i386: 3b46288783aacdd9842d43f221201c44 squid-2.5.STABLE3-6.3E.1.i386.rpm

x86_64: 0c63d4747a0e6848cd69259b6e7648dd squid-2.5.STABLE3-6.3E.1.x86_64.rpm

Red Hat Enterprise Linux ES version 3:

SRPMS:

319a574d8ab2d7e1bfa454055f3f1933 squid-2.5.STABLE3-6.3E.1.src.rpm

i386: 3b46288783aacdd9842d43f221201c44 squid-2.5.STABLE3-6.3E.1.i386.rpm

ia64: e92e66c250e34497a397c53c33ae1c2b squid-2.5.STABLE3-6.3E.1.ia64.rpm

x86_64: 0c63d4747a0e6848cd69259b6e7648dd squid-2.5.STABLE3-6.3E.1.x86_64.rpm

Red Hat Enterprise Linux WS version 3:

SRPMS:

319a574d8ab2d7e1bfa454055f3f1933 squid-2.5.STABLE3-6.3E.1.src.rpm

i386: 3b46288783aacdd9842d43f221201c44 squid-2.5.STABLE3-6.3E.1.i386.rpm

ia64: e92e66c250e34497a397c53c33ae1c2b squid-2.5.STABLE3-6.3E.1.ia64.rpm

x86_64: 0c63d4747a0e6848cd69259b6e7648dd squid-2.5.STABLE3-6.3E.1.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from


Summary

Topics%20covered

Topics Covered

security advisory critical remote attack Red Hat Enterprise Linux squid memory issue NTLM authentication issue

References

CVE -CVE-2004-0832

Package List


Severity
critical
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2004:462-01
Issue date: 2004-09-30
Updated on: 2004-09-30
Product: Red Hat Enterprise Linux

Topic

An updated squid package that fixes a security vulnerability in the NTLMauthentication helper is now available.

Topics%20covered

Topics Covered

security advisory critical remote attack Red Hat Enterprise Linux squid memory issue NTLM authentication issue

Relevant Releases Architectures

Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64

Red Hat Desktop version 3 - i386, x86_64

Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64

Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.