high7.5
CVE-2005-1857
Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply.
Impact
Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simpleproxy | Simpleproxy | Versions 2.2b, 3.0, 3.1, 3.2 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/16567/
- http://sourceforge.net/project/shownotes.php?group_id=604&release_id=351847
- http://www.debian.org/security/2005/dsa-786
- http://www.kb.cert.org/vuls/id/139421
- http://www.securityfocus.com/bid/14666
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22016
- http://secunia.com/advisories/16567/
- http://sourceforge.net/project/shownotes.php?group_id=604&release_id=351847
- http://www.debian.org/security/2005/dsa-786
- http://www.kb.cert.org/vuls/id/139421
- http://www.securityfocus.com/bid/14666
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22016