proxychains-ng

ProxyChains-NG 版本 4.17 自述文件 ProxyChains 是一个 UNIX 程序，它通过预加载的 DLL（dlsym、LDPRELOAD）挂钩动态链接程序中的网络相关 libc 函数，并将连接重定向到 SOCKS4a/5 或 HTTP 代理。它仅支持 TCP（不支持 UDP/ICMP 等）。 它的工作方式本质上是一种 HACK；因此它有可能无法与你的程序配合使用，尤其是当你的程序是脚本、会启动大量进程（如后台守护进程）或使用 dlopen 加载“模块”时（glibc 动态链接器中的一个 bug）。不过，它应该适用于简单的编译型（C/C++）动态链接程序。...

Fedora 43 : proxychains-ng (2025-58fe871812)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-58fe871812 advisory. Update to master to fix CVE-2025-34451 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

CVE-2025-34451

A flaw was found in proxychains-ng. An attacker can exploit a stack-based buffer overflow vulnerability in the proxyfromstring function by providing crafted proxy configuration entries containing overly long username or password fields. This can lead to memory corruption or application crashes,...

EUVD-2025-204400

rofl0r/proxychains-ng versions up to and including 4.17 and prior to commit cc005b7 contain a stack-based buffer overflow vulnerability in the function proxyfromstring located in src/libproxychains.c. When parsing crafted proxy configuration entries containing overly long username or password...

Linux Distros Unpatched Vulnerability : CVE-2025-34451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rofl0r/proxychains-ng versions up to and including 4.17 and prior to commit cc005b7 contain a stack-based buffer overflow vulnerability in the function...

CVE-2025-34451

rofl0r/proxychains-ng versions up to and including 4.17 and prior to commit cc005b7 contain a stack-based buffer overflow vulnerability in the function proxyfromstring located in src/libproxychains.c. When parsing crafted proxy configuration entries containing overly long username or password...

DEBIAN-CVE-2025-34451

rofl0r/proxychains-ng versions up to and including 4.17 and prior to commit cc005b7 contain a stack-based buffer overflow vulnerability in the function proxyfromstring located in src/libproxychains.c. When parsing crafted proxy configuration entries containing overly long username or password...

UBUNTU-CVE-2025-34451

rofl0r/proxychains-ng versions up to and including 4.17 and prior to commit cc005b7 contain a stack-based buffer overflow vulnerability in the function proxyfromstring located in src/libproxychains.c. When parsing crafted proxy configuration entries containing overly long username or password...

CVE-2025-34451

rofl0r/proxychains-ng versions up to and including 4.17 and prior to commit cc005b7 contain a stack-based buffer overflow vulnerability in the function proxyfromstring located in src/libproxychains.c. When parsing crafted proxy configuration entries containing overly long username or password...

CVE-2025-34451 rofl0r/proxychains-ng <= 4.17 Stack-based Buffer Overflow

rofl0r/proxychains-ng versions up to and including 4.17 and prior to commit cc005b7 contain a stack-based buffer overflow vulnerability in the function proxyfromstring located in src/libproxychains.c. When parsing crafted proxy configuration entries containing overly long username or password...

CVE-2025-34451 rofl0r/proxychains-ng <= 4.17 Stack-based Buffer Overflow

rofl0r/proxychains-ng versions up to and including 4.17 and prior to commit cc005b7 contain a stack-based buffer overflow vulnerability in the function proxyfromstring located in src/libproxychains.c. When parsing crafted proxy configuration entries containing overly long username or password...

CVE-2025-34451

rofl0r/proxychains-ng versions up to and including 4.17 and prior to commit cc005b7 contain a stack-based buffer overflow vulnerability in the function proxyfromstring located in src/libproxychains.c. When parsing crafted proxy configuration entries containing overly long username or password...

proxychains-ng 安全漏洞

proxychains-ng is a preloaded program by rofl0r individual developers. A security vulnerability exists in proxychains-ng versions 4.17 and earlier and cc005b7 and earlier, which stems from a stack buffer overflow in the proxyfromstring function, which could lead to memory corruption or a crash...

EUVD-2015-3922

Malware in sbrugna...

CVE-2015-3887

Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse libproxychains4.so library in the current working directory, which is referenced in the LDPRELOAD path...

Path traversal

Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse libproxychains4.so library in the current working directory, which is referenced in the LDPRELOAD path...

CVE-2015-3887

Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse libproxychains4.so library in the current working directory, which is referenced in the LDPRELOAD path...

CVE-2015-3887

CVE-2015-3887 affects ProxyChains-NG up to version 4.9. The vulnerability arises from an untrusted search path: a Trojan horse library libproxychains4.so placed in the current working directory can be loaded via LD_PRELOAD, allowing local privilege escalation. Exploitation is local with no user i...

Proxychains-ng 'LD_PRELOAD' 任意代码执行漏洞

No description provided by source...

FreeBSD : proxychains-ng -- current path as the first directory for the library search path (9471ec47-05a2-11e5-8fda-002590263bf5)

Mamoru TASAKA reports : proxychains4 sets LDPRELOAD to dlopen libproxychains4.so and execvp the arbitrary command user has specified. proxychains4 sets the current directory as the first path to search libproxychains4.so %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...