CVE-2008-4541 Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.
HighCVSS 10.0
EPSS 8.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun java system web proxy server | = 4.0 | No fix listed |
| sun java system web proxy server | = 4.0-sp1 | No fix listed |
| sun java system web proxy server | = 4.0.1 | No fix listed |
| sun java system web proxy server | = 4.0.1-sp1 | No fix listed |
| sun java system web proxy server | = 4.0.1-sp2 | No fix listed |
| sun java system web proxy server | = 4.0.1-sp3 | No fix listed |
| sun java system web proxy server | = 4.0.1-sp4 | No fix listed |
| sun java system web proxy server | = 4.0.1-sp5 | No fix listed |
| sun java system web proxy server | = 4.0.1-sp6 | No fix listed |
| sun java system web proxy server | = 4.0.2 | No fix listed |
| sun java system web proxy server | = 4.0.2-sp1 | No fix listed |
| sun java system web proxy server | = 4.0.2-sp2 | No fix listed |
| sun java system web proxy server | = 4.0.2-sp3 | No fix listed |
| sun java system web proxy server | = 4.0.2-sp4 | No fix listed |
| sun java system web proxy server | = 4.0.2-sp5 | No fix listed |
| sun java system web proxy server | = 4.0.2-sp6 | No fix listed |
| sun java system web proxy server | = 4.0.3 | No fix listed |
| sun java system web proxy server | = 4.0.3-sp1 | No fix listed |
| sun java system web proxy server | = 4.0.3-sp2 | No fix listed |
| sun java system web proxy server | = 4.0.3-sp3 | No fix listed |
| sun java system web proxy server | = 4.0.3-sp4 | No fix listed |
| sun java system web proxy server | = 4.0.3-sp5 | No fix listed |
| sun java system web proxy server | = 4.0.3-sp6 | No fix listed |
| sun java system web proxy server | = 4.0.4 | No fix listed |
| sun java system web proxy server | = 4.0.4-sp1 | No fix listed |
Show 14 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sun java system web proxy server | = 4.0.4-sp2 | No fix listed |
| sun java system web proxy server | = 4.0.4-sp3 | No fix listed |
| sun java system web proxy server | = 4.0.4-sp4 | No fix listed |
| sun java system web proxy server | = 4.0.4-sp5 | No fix listed |
| sun java system web proxy server | = 4.0.4-sp6 | No fix listed |
| sun java system web proxy server | = 4.0.5 | No fix listed |
| sun java system web proxy server | = 4.0.5-sp1 | No fix listed |
| sun java system web proxy server | = 4.0.5-sp2 | No fix listed |
| sun java system web proxy server | = 4.0.5-sp3 | No fix listed |
| sun java system web proxy server | = 4.0.5-sp4 | No fix listed |
| sun java system web proxy server | = 4.0.5-sp5 | No fix listed |
| sun java system web proxy server | = 4.0.5-sp6 | No fix listed |
| sun java system web proxy server | = 4.0.6 | No fix listed |
| sun java system web proxy server | = 4.0.7 | No fix listed |
References
- 20081009 Sun Java Web Proxy Server FTP Resource Handling Heap-Based Buffer Overflow third-party-advisory
- 32227 third-party-advisory vendor-advisory
- 1021038 vdb-entry
- 242986 vendor-advisory
- 31691 vdb-entry
- ADV-2008-2781 vdb-entry vendor-advisory
- sun-webproxy-ftp-bo(45782) vdb-entry