BlueCoat WinProxy 6.0 R1c - Host Remote Stack Overflow (SEH)

BlueCoat WinProxy 6.0 R1c - Host Remote Stack Overflow SEH !perl "WinProxy 6.0 R1c" Remote Stack/SEH Overflow Exploit Author: FistFucker aka FistFuXXer e-Mail: [email protected] Advisory: http://www.idefense.com/intelligence/vulnerabilities/display.php?id=364 CVE info: CAN-2005-4085 use IO::Socke...

CVE-2005-4085

CVE-2005-4085 describes a remote code execution vulnerability in Blue Coat WinProxy (and related ProxyAV web console) caused by a buffer overflow when processing a long Host header. Affected: WinProxy prior to 6.1a; ProxyAV web console prior to 2.4.2.3. Root cause: buffer overflow overwrites SEH ...

CVE-2005-4085

Buffer overflow in BlueCoat a WinProxy before 6.1a and b the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header...

CVE-2005-4085

Buffer overflow in BlueCoat a WinProxy before 6.1a and b the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header...

BlueCoat ProxySG Console Management Detection

The remote host appears to be a BlueCoat ProxySG, connections are allowed to the web console management. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

BlueCoat ProxySG console management detection

The remote host appears to be a BlueCoat ProxySG, connections are allowed to the web console management. Letting attackers know that you are using a BlueCoat will help them to focus their attack or will make them change their strategy. OpenVAS Vulnerability Test $Id: bluecoatmgntconsole.nasl 8023...

Web Server Cross Site Scripting

The remote web server seems to be vulnerable to a Cross Site Scripting vulnerability XSS. The vulnerability is caused by the result being returned to the user when a non-existing file is requested e.g. the result contains script code provided in the request. This vulnerability would allow an...