CVE-2004-0832: The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentic...

Security readout for executives and security teams

This is an old Squid proxy denial-of-service issue. Squid 2.5.6 and earlier can crash when NTLM authentication is enabled and malformed NTLMSSP data reaches vulnerable string-handling code. The main business risk is proxy outage, not confirmed data theft or code execution. Exposure is most likely in legacy environments still running Squid 2.5.6 or earlier with NTLM authentication enabled. Modern or vendor-maintained Squid packages may include backported fixes, but that must be verified against the package vendor advisory. Treat this as a legacy exposure cleanup item unless a vulnerable Squid proxy is still business-critical or externally reachable. If affected systems exist, prioritize remediation because a proxy crash can disrupt web access and dependent services. Mitigation focus: Identify any Squid 2.5.6 or earlier deployments.; Disable NTLM authentication where it is not required.; Apply relevant Squid or operating-system vendor security updates..

Prepared

Jun 30, 2026, 02:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.