critical10.0Public exploit code
CVE-2001-0028
Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands via a large number of…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Oops Proxy Server 1.4.22 - Remote Buffer Overflow (2)2000-12-07 · remote · linux · Verified
- Oops Proxy Server 1.4.22 - Remote Buffer Overflow (1)2000-12-11 · remote · unix · Verified
Impact
Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands via a large number of " (quotation) characters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Igor Khasilev | Oops Proxy Server | Version 1.4.22 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0127.html
- http://archives.neohapsis.com/archives/freebsd/2000-12/0418.html
- http://www.securityfocus.com/bid/2099
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5725
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0127.html
- http://archives.neohapsis.com/archives/freebsd/2000-12/0418.html
- http://www.securityfocus.com/bid/2099
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5725