Squid Proxy NTLM Authentication Buffer Overflow Vulnerability

Squid Proxy NTLM Authentication Buffer Overflow Vulnerability

Solution:
Please see the referenced advisories for more information and fixes.

Squid Web Proxy Cache 2.4

SuSE squid-2.4.STABLE6-9.i386.patch.rpm
Intel i386 Platform
ftp://ftp.suse.com/pub/suse/i386/update/8.0/n2/squid-2.4.STABLE6-9.i38 6.patch.rpm

Squid Web Proxy Cache 2.5 .STABLE4

Mandrake squid-2.5.STABLE4-1.2.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.5.STABLE4-1.2.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php

Squid libntlmssp.c.patch
http://www.squid-cache.org/~wessels/patch/libntlmssp.c.patch

Squid Web Proxy Cache 2.5 .STABLE1

Mandrake squid-2.5.STABLE1-7.2.91mdk.i586.rpm
Mandrake Linux 9.1
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.5.STABLE1-7.2.91mdk.ppc.rpm
Mandrake Linux 9.1/PPC
http://www.mandrakesecure.net/en/ftp.php

RedHat squid-2.5.STABLE1-9.10.legacy.i386.rpm
Red Hat Linux 9:
http://download.fedoralegacy.org/redhat/9/updates/i386/squid-2.5.STABL E1-9.10.legacy.i386.rpm

Squid libntlmssp.c.patch
http://www.squid-cache.org/~wessels/patch/libntlmssp.c.patch

SuSE squid-2.5.STABLE1-98.i586.patch.rpm
Intel i386 Platform
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/squid-2.5.STABLE1 -98.i586.patch.rpm

SuSE squid-2.5.STABLE1-98.i586.rpm
Intel i386 Platform
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/squid-2.5.STABLE1 -98.i586.rpm

Squid Web Proxy Cache 2.5 .STABLE3

Fedora squid-2.5.STABLE3-2.fc1.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/

Fedora squid-2.5.STABLE3-2.fc1.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/

Fedora squid-debuginfo-2.5.STABLE3-2.fc1.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/

Fedora squid-debuginfo-2.5.STABLE3-2.fc1.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/

Mandrake squid-2.5.STABLE3-3.2.92mdk.amd64.rpm
Mandrake Linux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.5.STABLE3-3.2.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php

RedHat squid-2.5.STABLE3-2.fc1.6.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/squid-2.5.STABL E3-2.fc1.6.legacy.i386.rpm

Squid libntlmssp.c.patch
http://www.squid-cache.org/~wessels/patch/libntlmssp.c.patch

SuSE squid-2.5.STABLE3-110.i586.patch.rpm
Intel i386 Platform
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/squid-2.5.STABLE3 -110.i586.patch.rpm

SuSE squid-2.5.STABLE3-110.x86_64.patch.rpm
Opteron x86_64 Platform
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/squid-2.5.STA BLE3-110.x86_64.patch.rpm

SuSE squid-2.5.STABLE3-110.i586.rpm
Intel i386 Platform
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/squid-2.5.STABLE3 -110.i586.rpm

SuSE squid-2.5.STABLE3-110.x86_64.rpm
Opteron x86_64 Platform
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/squid-2.5.STA BLE3-110.x86_64.rpm

Squid Web Proxy Cache 2.5 .STABLE5

Conectiva squid-2.5.5-25761U90_7cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/squid-2.5.5-25761U90_7cl.i3 86.rpm

Conectiva squid-2.5.5-63116U10_4cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/squid-2.5.5-63116U10_4cl.i 386.rpm

Conectiva squid-auth-2.5.5-25761U90_7cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/squid-auth-2.5.5-25761U90_7 cl.i386.rpm

Conectiva squid-auth-2.5.5-63116U10_4cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/squid-auth-2.5.5-63116U10_ 4cl.i386.rpm

Conectiva squid-extra-templates-2.5.5-25761U90_7cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/squid-extra-templates-2.5.5 -25761U90_7cl.i386.rpm

Conectiva squid-extra-templates-2.5.5-63116U10_4cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/squid-extra-templates-2.5. 5-63116U10_4cl.i386.rpm

Fedora squid-2.5.STABLE5-4.fc2.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

Fedora squid-2.5.STABLE5-4.fc2.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

Fedora squid-debuginfo-2.5.STABLE5-4.fc2.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

Fedora squid-debuginfo-2.5.STABLE5-4.fc2.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

RedHat squid-2.5.STABLE9-1.FC2.4.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/squid-2.5.STABL E9-1.FC2.4.legacy.i386.rpm

Squid libntlmssp.c.patch
http://www.squid-cache.org/~wessels/patch/libntlmssp.c.patch

SuSE squid-2.5.STABLE5-42.9.i586.patch.rpm
Intel i386 Platform
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/squid-2.5.STABLE5 -42.9.i586.patch.rpm

SuSE squid-2.5.STABLE5-42.9.x86_64.patch.rpm
Opteron x86_64 Platform
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/squid-2.5.STA BLE5-42.9.x86_64.patch.rpm

SuSE squid-2.5.STABLE5-42.9.i586.rpm
Intel i386 Platform
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/squid-2.5.STABLE5 -42.9.i586.rpm

SuSE squid-2.5.STABLE5-42.9.x86_64.rpm
Opteron x86_64 Platform
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/squid-2.5.STA BLE5-42.9.x86_64.rpm

tinysofa squid-2.5.STABLE5-6ts.i586.rpm
http://http.tinysofa.org/pub/tinysofa/updates/server-1.0/rpms/squid-2. 5.STABLE5-6ts.i586.rpm

Trustix squid-2.5.STABLE5-0.2tr.i586.rpm
http://http.trustix.org/pub/trustix/updates/2.0/rpms/squid-2.5.STABLE5 -0.2tr.i586.rpm

Trustix squid-2.5.STABLE5-5tr.i586.rpm
http://http.trustix.org/pub/trustix/updates/2.1/rpms/squid-2.5.STABLE5 -5tr.i586.rpm

SGI ProPack 3.0

SGI patch10083.tar.gz
ftp://patches.sgi.com/support/free/security/patches/ProPack/3/patch100 83.tar.gz