Lucene search
HistoryMar 01, 2005 - 5:00 a.m.
CVE-2004-0992
proxytunnel
format string vulnerability
remote code execution
cve-2004-0992
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.019 Low
EPSS
Percentile
88.6%
Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer.
Affected configurations
Node
proxytunnelproxytunnelMatch1.0.6
ORproxytunnelproxytunnelMatch1.1.3
ORproxytunnelproxytunnelMatch1.2.2
ORproxytunnelproxytunnelMatch1.2_.0
Related
securityvulns
securityvulns
openvas
openvas
Gentoo Security Advisory GLSA 200411-07 (Proxytunnel)
2008-09-24 00:00:00
FreeBSD Ports: proxytunnel
2008-09-04 00:00:00
FreeBSD Ports: proxytunnel
2008-09-04 00:00:00
freebsd
freebsd
proxytunnel -- format string vulnerability
2004-11-01 00:00:00
nessus
nessus
FreeBSD : proxytunnel -- format string vulnerability (157)
2004-11-23 00:00:00
FreeBSD : proxytunnel -- format string vulnerability (50744596-368f-11d9-a9e7-0001020eed82)
2009-04-23 00:00:00
GLSA-200411-07 : Proxytunnel: Format string vulnerability
2004-11-03 00:00:00
gentoo
gentoo
Proxytunnel: Format string vulnerability
2004-11-03 00:00:00
nvd
nvd
CVE-2004-0992
2005-03-01 05:00:00
cvelist
cvelist
CVE-2004-0992
2004-11-19 05:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.019 Low
EPSS
Percentile
88.6%
Related for CVE-2004-0992