28 matches found
CVE-2004-0992: Undefined Security Weakness
Format string vulnerability in the -a option daemon mode in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer...
[Full-Disclosure] [ GLSA 200411-07 ] Proxytunnel: Format string vulnerability
Gentoo Linux Security Advisory GLSA 200411-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
Proxytunnel: Format string vulnerability
Background Proxytunnel is a program that tunnels connections to a remote server through a standard HTTPS proxy. Description Florian Schilhabel of the Gentoo Linux Security Audit project found a format string vulnerability in Proxytunnel. When the program is started in daemon mode -a port, it...
GLSA-200411-07 : Proxytunnel: Format string vulnerability
The remote host is affected by the vulnerability described in GLSA-200411-07 Proxytunnel: Format string vulnerability Florian Schilhabel of the Gentoo Linux Security Audit project found a format string vulnerability in Proxytunnel. When the program is started in daemon mode -a port, it improperly...
proxytunnel format string bug
Format string bug on syslog...
proxytunnel -- format string vulnerability
A Gentoo Linux Security Advisory reports: Florian Schilhabel of the Gentoo Linux Security Audit project found a format string vulnerability in Proxytunnel. When the program is started in daemon mode -a port, it improperly logs invalid proxy answers to syslog. A malicious remote server could send...
[SA12685] proxytunnel Username and Password Disclosure
TITLE: proxytunnel Username and Password Disclosure SECUNIA ADVISORY ID: SA12685 VERIFY ADVISORY: http://secunia.com/advisories/12685/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: proxytunnel 1.x http://secunia.com/product/3983/ DESCRIPTION: A...