Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/11592 | Patch Vendor Advisory |
| http://www.gentoo.org/security/en/glsa/glsa-200411-07.xml | Patch Vendor Advisory |
| http://proxytunnel.sourceforge.net/news.html | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/17945 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-02-28 21:00
Updated : 2017-07-10 18:30
NVD link : CVE-2004-0992
Mitre link : CVE-2004-0992
JSON object : View
CWE
Products Affected
proxytunnel
- proxytunnel


