CVE-2004-0992 Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer.
HighCVSS 10.0
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| proxytunnel | = 1.0.6 | No fix listed |
| proxytunnel | = 1.1.3 | No fix listed |
| proxytunnel | = 1.2.2 | No fix listed |
| proxytunnel | = 1.2_.0 | No fix listed |
References
- proxytunnel.sourceforge.net
- GLSA-200411-07 patch vendor-advisory
- 11592 patch vdb-entry vendor-advisory
- proxytunnel-message-format-string(17945) vdb-entry