CVE-2007-2881

Description

Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation.

Affected products

• sun / java_system_web_proxy_server4.0.4

References

• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2007/1957
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/34524
• VENDOR_ADVISORYhttp://secunia.com/advisories/25405
• MISChttp://osvdb.org/35841
• MISChttp://www.kb.cert.org/vuls/id/746889
• MISChttp://sunsolve.sun.com/search/document.do?assetkey=1-26-102927-1
• MISChttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=536
• MISChttp://www.securitytracker.com/id?1018130
• MISChttp://www.securityfocus.com/bid/24165