go-ntlmssp Out-of-Bounds Write Vulnerability in NTLM Challenge Handling

A vulnerability in the go-ntlmssp package, prior to version 0.1.1, allows a malicious NTLM challenge message to cause a slice out-of-bounds panic. This issue can crash any Go process that uses 'ntlmssp.Negotiator' as an HTTP transport. The vulnerability arises from improper handling of NTLM challenge messages, leading to a panic that disrupts the normal execution of the program.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing the Go process to crash.

Remediation

Users can upgrade to go-ntlmssp version 0.1.1 or later to address this vulnerability.