Evil-DB LogoEvil-DB
← All CVEs

CVE-2005-0097

medium · 5

The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type 3 message that triggers a NULL dereference.

5
CVSS
10.6%
EPSS (exploit prob.)
96th
EPSS percentile
2005-01-11
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

VendorProductAffected versions
squidsquid2.0_patch2
squidsquid2.1_patch2
squidsquid2.3_.stable4
squidsquid2.3_.stable5
squidsquid2.3_stable5
squidsquid2.4
squidsquid2.4_.stable2
squidsquid2.4_.stable6
squidsquid2.4_.stable7
squidsquid2.4_stable7
squidsquid2.5.6
squidsquid2.5.stable1
squidsquid2.5.stable2
squidsquid2.5.stable3
squidsquid2.5.stable4
squidsquid2.5.stable5
squidsquid2.5.stable6
squidsquid2.5.stable7
squidsquid2.5_.stable1
squidsquid2.5_.stable3
squidsquid2.5_.stable4
squidsquid2.5_.stable5
squidsquid2.5_.stable6
squidsquid2.5_stable3
squidsquid2.5_stable4
squidsquid2.5_stable9
squidsquid2.6.stable1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2005-0097