CVE-2007-2881 | Vulnerability Database | Aqua Security

Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation.

Affected Software

Name	Vendor	Start Version	End Version
Java_system_web_proxy_server	Sun	*	4.0.4 (including)

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=536
http://osvdb.org/35841
http://secunia.com/advisories/25405
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102927-1
http://www.kb.cert.org/vuls/id/746889
http://www.securityfocus.com/bid/24165
http://www.securitytracker.com/id?1018130
http://www.vupen.com/english/advisories/2007/1957
https://exchange.xforce.ibmcloud.com/vulnerabilities/34524
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=536
http://osvdb.org/35841
http://secunia.com/advisories/25405
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102927-1
http://www.kb.cert.org/vuls/id/746889
http://www.securityfocus.com/bid/24165
http://www.securitytracker.com/id?1018130
http://www.vupen.com/english/advisories/2007/1957
https://exchange.xforce.ibmcloud.com/vulnerabilities/34524

NVD	https://nvd.nist.gov/vuln/detail/CVE-2007-2881
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html