critical10.0Public exploit code
CVE-2004-0326
Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Proxy-Pro Professional GateKeeper 4.7 Web Proxy - Buffer Overrun2004-02-23 · remote · windows · Verified
- Proxy-Pro Professional GateKeeper 4.7 - GET Overflow (Metasploit)2010-09-20 · remote · windows · Verified
- Proxy-Pro Professional GateKeeper Pro 4.7 - Web proxy Remote Buffer Overflow2004-02-26 · remote · windows · Verified
Impact
Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Proxy-Pro | Professional Gatekeeper | Version 4.7 |
References
- NVD record
- CVE.org record
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017703.html
- http://marc.info/?l=bugtraq&m=107755692400728&w=2
- http://www.securityfocus.com/bid/9716
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15277
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017703.html
- http://marc.info/?l=bugtraq&m=107755692400728&w=2
- http://www.securityfocus.com/bid/9716
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15277