NetSight
critical10.0Public exploit code

CVE-2011-5124

Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to execute arbitrary code via a large packet to the synchronization port (16102/tcp).

Affected products

VendorProductAffected versions
BluecoatProxyone
All versions
BluecoatProxysg
Versions 4.2.6, 4.3.2.3, 5.1, 5.1.6.1, 5.2, 5.2.2.4

Weakness classification

References