Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Java_system_web_proxy_server | Sun | 3.6 (including) | 3.6 (including) |
| Java_system_web_proxy_server | Sun | 3.6-sp1 (including) | 3.6-sp1 (including) |
| Java_system_web_proxy_server | Sun | 3.6-sp2 (including) | 3.6-sp2 (including) |
| Java_system_web_proxy_server | Sun | 3.6-sp3 (including) | 3.6-sp3 (including) |
| Java_system_web_proxy_server | Sun | 3.6-sp4 (including) | 3.6-sp4 (including) |
References
- http://secunia.com/advisories/13036/
- http://securitytracker.com/id?1012005
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1\u0026searchclause=security
- http://www.auscert.org.au/render.html?it=4516
- http://www.ciac.org/ciac/bulletins/p-027.shtml
- http://www.kb.cert.org/vuls/id/964401
- http://www.osvdb.org/displayvuln.php?osvdb_id=11304
- http://www.pentest.co.uk/documents/ptl-2004-06.html
- http://www.securityfocus.com/bid/11566
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17920
- http://secunia.com/advisories/13036/
- http://securitytracker.com/id?1012005
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1\u0026searchclause=security
- http://www.auscert.org.au/render.html?it=4516
- http://www.ciac.org/ciac/bulletins/p-027.shtml
- http://www.kb.cert.org/vuls/id/964401
- http://www.osvdb.org/displayvuln.php?osvdb_id=11304
- http://www.pentest.co.uk/documents/ptl-2004-06.html
- http://www.securityfocus.com/bid/11566
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17920