NetSight
high7.5Public exploit code

CVE-2004-2003

Buffer overflow in the ssl_prcert function in the SSLway filter (sslway.c) for DeleGate 8.9.2 and earlier allows remote attackers to execute arbitrary code via…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in the ssl_prcert function in the SSLway filter (sslway.c) for DeleGate 8.9.2 and earlier allows remote attackers to execute arbitrary code via a certificate with a long (1) subject or (2) issuer name field.

Affected products

VendorProductAffected versions
DelegateDelegate
Versions 7.7.0, 7.7.1, 7.8.0, 7.8.1, 7.8.2, 7.9.11

References