CVE-2005-1857 Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply.
HighCVSS 7.5
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simpleproxy | = 2.2b | No fix listed |
| simpleproxy | = 3.0 | No fix listed |
| simpleproxy | = 3.1 | No fix listed |
| simpleproxy | = 3.2 | No fix listed |
| debian/simpleproxy(Debian:12) | < 3.2-4 | 3.2-4 |
| debian/simpleproxy(Debian:14) | < 3.2-4 | 3.2-4 |
| debian/simpleproxy(Debian:14) | = 3.2-3 | No fix listed |
| debian/simpleproxy(Debian:14) | = 3.2-3sarge1 | No fix listed |
References
- 16567 third-party-advisory vendor-advisory
- sourceforge.net patch
- DSA-786 patch vendor-advisory
- VU#139421 third-party-advisory us-government-resource
- 14666 patch vdb-entry
- simpleproxy-reply-format-string(22016) vdb-entry
- Debian Security Tracker CVE-2005-1857 vendor-advisory