CVE-2004-1350 Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT...
HighCVSS 7.5
EPSS 7.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun java system web proxy server | = 3.6 | No fix listed |
| sun java system web proxy server | = 3.6-sp1 | No fix listed |
| sun java system web proxy server | = 3.6-sp2 | No fix listed |
| sun java system web proxy server | = 3.6-sp3 | No fix listed |
| sun java system web proxy server | = 3.6-sp4 | No fix listed |
References
- 13036 patch third-party-advisory vendor-advisory
- 1012005 patch vdb-entry vendor-advisory
- 57606 vendor-advisory
- ESB-2004.0691 third-party-advisory
- P-027 government-resource third-party-advisory
- VU#964401 third-party-advisory us-government-resource
- 11304 patch vdb-entry vendor-advisory
- www.pentest.co.uk
- 11566 patch vdb-entry vendor-advisory
- sun-web-proxy-bo(17920) vdb-entry