NetSight
critical10.0Public exploit code

CVE-2004-2114

Stack-based and heap-based buffer overflows in ProxyNow!

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based and heap-based buffer overflows in ProxyNow! 2.75 and earlier allow remote attackers to execute arbitrary code via a GET request with a long ftp:// URL.

Affected products

VendorProductAffected versions
InternetnowProxynow
Versions 2.6, 2.75

References