VULHUB ™

Stellar-X MSNTAuth is an authentication module for the Squid web proxy server. It will allow Squid to authenticate users on an NT domain. MSNTAuth is shipped as part of Squid but is not enabled by default. It has been reported that MSNTAuth is vulnerable to a remotely exploitable format string vulnerability in its internal logging facility. Data that may be externally supplied is passed to syslog() as the format string argument. This may allow for remote attackers who can inject format specifiers into a log message to execute arbitrary code.

Stellar-X MSNTAuth is an authentication module for the Squid web proxy server. It will allow Squid to authenticate users on an NT domain. MSNTAuth is shipped as part of Squid but is not enabled by default. It has been reported that MSNTAuth is vulnerable to a remotely exploitable format string vulnerability in its internal logging facility. Data that may be externally supplied is passed to syslog() as the format string argument. This may allow for remote attackers who can inject format specifiers into a log message to execute arbitrary code.