CVE-2005-4085 Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header.
HighCVSS 7.5
EPSS 65.9%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bluecoat webproxy | = 4.0-r1a | No fix listed |
| bluecoat webproxy | = 4.0-r1b | No fix listed |
| bluecoat webproxy | = 4.0-r1c | No fix listed |
| bluecoat webproxy | = 4.0-r1e | No fix listed |
| bluecoat webproxy | = 4.0-r1f | No fix listed |
| bluecoat webproxy | = 4.0-r1h | No fix listed |
| bluecoat webproxy | = 4.0-r1k | No fix listed |
| bluecoat webproxy | = 4.0-r1m | No fix listed |
| bluecoat webproxy | = 4.0-r1n | No fix listed |
| bluecoat webproxy | = 4.0-r1p | No fix listed |
| bluecoat webproxy | = 5.0-r1a | No fix listed |
| bluecoat webproxy | = 5.0-r1b | No fix listed |
| bluecoat webproxy | = 5.0-r1c | No fix listed |
| bluecoat webproxy | = 5.1-r1a | No fix listed |
| bluecoat webproxy | = 5.1-r1d | No fix listed |
| bluecoat webproxy | = 5.1-r1e | No fix listed |
| bluecoat webproxy | = 5.2-r1a | No fix listed |
| bluecoat webproxy | = 6.0-r1a | No fix listed |
| bluecoat webproxy | = 6.0-r1c | No fix listed |
| bluecoat proxyav | All versions | No fix listed |
References
- 18288 patch third-party-advisory vendor-advisory
- 18909 patch third-party-advisory vendor-advisory
- 1015441 patch vdb-entry vendor-advisory
- www.bluecoat.com patch vendor-advisory
- 20060105 Blue Coat Systems WinProxy Host Header Stack Overflow Vulnerability patch third-party-advisory vendor-advisory
- 16147 exploit patch vdb-entry
- ADV-2006-0065 vdb-entry
- ADV-2006-0622 vdb-entry