Lucene search

K
cveMitreCVE-2004-2685
HistorySep 06, 2007 - 7:00 p.m.

CVE-2004-2685

2007-09-0619:00:00
CWE-119
mitre
web.nvd.nist.gov
26
cve-2004-2685
buffer overflow
youngzsoft ccproxy
remote code execution
telnet proxy service
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8

Confidence

Low

EPSS

0.945

Percentile

99.3%

Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long address in a ping (p) command to the Telnet proxy service, a different vector than CVE-2004-2416.

Affected configurations

Nvd
Node
youngzsoftccproxyRange6.2
VendorProductVersionCPE
youngzsoftccproxy*cpe:2.3:a:youngzsoft:ccproxy:*:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8

Confidence

Low

EPSS

0.945

Percentile

99.3%