CVE-2004-1350

Description

Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests.

Affected products

• sun / java_system_web_proxy_server3.6 – 3.6
• sun / java_system_web_proxy_server3.6 – 3.6
• sun / java_system_web_proxy_server3.6 – 3.6
• sun / java_system_web_proxy_server3.6 – 3.6
• sun / java_system_web_proxy_server3.6 – 3.6

References

• MISChttp://www.securityfocus.com/bid/11566
• MISChttp://securitytracker.com/id?1012005
• MISChttp://www.pentest.co.uk/documents/ptl-2004-06.html
• MISChttp://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1&searchclause=security
• MISChttp://www.kb.cert.org/vuls/id/964401
• MISChttp://www.ciac.org/ciac/bulletins/p-027.shtml
• MISChttp://www.auscert.org.au/render.html?it=4516
• MISChttp://www.osvdb.org/displayvuln.php?osvdb_id=11304
• VENDOR_ADVISORYhttp://secunia.com/advisories/13036/
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/17920