CVE-2004-1350

Опубликовано: 30 окт. 2004

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests.

Ссылки

http://secunia.com/advisories/13036/
Patch
Vendor Advisory
http://securitytracker.com/id?1012005
Patch
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1&searchclause=security
http://www.auscert.org.au/render.html?it=4516
http://www.ciac.org/ciac/bulletins/p-027.shtml
http://www.kb.cert.org/vuls/id/964401
US Government Resource
http://www.osvdb.org/displayvuln.php?osvdb_id=11304
Patch
Vendor Advisory
http://www.pentest.co.uk/documents/ptl-2004-06.html
http://www.securityfocus.com/bid/11566
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17920
http://secunia.com/advisories/13036/
Patch
Vendor Advisory
http://securitytracker.com/id?1012005
Patch
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1&searchclause=security
http://www.auscert.org.au/render.html?it=4516
http://www.ciac.org/ciac/bulletins/p-027.shtml
http://www.kb.cert.org/vuls/id/964401
US Government Resource
http://www.osvdb.org/displayvuln.php?osvdb_id=11304
Patch
Vendor Advisory
http://www.pentest.co.uk/documents/ptl-2004-06.html
http://www.securityfocus.com/bid/11566
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17920

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sun:java_system_web_proxy_server:3.6:*:*:*:*:*:*:*

cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp1:*:*:*:*:*:*

cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp2:*:*:*:*:*:*

cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp3:*:*:*:*:*:*

cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp4:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.25414

Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-jc9j-72j5-pw3x

github

больше 3 лет назад