Sun Java系统Web代理服务器FTP子系统堆溢出漏洞

BUGTRAQ ID: 31691 CVECAN ID: CVE-2008-4541 Sun Java System Web Proxy Server是一款基于WEB的代理服务程序。 Sun Java Web代理服务器的FTP子系统没有正确地处理FTP资源。如果远程攻击者向有漏洞的服务器发送了恶意的HTTP GET请求的话，就可以触发堆溢出，导致执行任意指令。 Sun Java System Web Proxy Server 4.0 - 4.0.7 Sun已经为此发布了一个安全公告（Sun-Alert-242986）以及相应补丁: Sun-Alert-242986：A Heap...

iDefense Security Advisory 10.14.08: Sun Java Web Proxy Server FTP Resource Handling Heap-Based Buffer Overflow

iDefense Security Advisory 10.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 09, 2008 I. BACKGROUND Sun Microsystems Inc's Java System is a collection of server applications bundled together. One such server application included is the Web Proxy Server. This software implements...

Sun Java System Web Proxy Server Two Vulnerabilities (Linux)

This host has Sun Java Web Proxy Server running, which is prone to heap buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsunjavawebporxysvrvulnlin.nasl 7174 2017-09-18 11:48:08Z asteins $ Sun Java System Web Proxy Server Two Vulnerabilities Linux Authors: Chandan S Copyright:...

Sun Java System Web Proxy Server Vulnerabilities (Windows)

This host has Sun Java Web Proxy Server running, which is prone to heap buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsunjavawebporxysvrvulnwin.nasl 6605 2017-07-07 11:22:07Z cfischer $ Sun Java System Web Proxy Server Vulnerabilities Windows Authors: Chandan S Copyright:...

Sun Java Web Proxy buffer overflow

Buffer overflow on FTP resource GET request handling in HTTP proxy...

Sun Java System Web Proxy Server < 4.0.8 Multiple Vulnerabilities - Linux

Sun Java Web Proxy Server is prone to a heap buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Heap overflow

Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request...

CVE-2008-4541

Sun Java System Web Proxy Server (Sun Microsystems) is affected by CVE-2008-4541 due to a heap-based buffer overflow in the FTP subsystem. The vulnerability exists in versions 4.0 through 4.0.7 and can be triggered by processing a crafted HTTP GET request, potentially allowing remote code executi...

CVE-2008-4541

Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request...

KLA10346 ACE vulnerability in Java System Web Proxy Server

A buffer overflow was found in the Java System Web Proxy Server. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely a via specially designed GET request. Original advisories - Related products Sun-Java-System-Web-Proxy-Server...

CVE-2008-4133

The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote attackers to bypass web restriction filters...

Authentication flaw

The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote attackers to bypass web restriction filters...

CVE-2008-4133

CVE-2008-4133 affects the web proxy service in D-Link DIR-100 devices with firmware 1.12 or earlier. The issue is improper filtering of web requests containing large URLs, enabling remote attackers to bypass web-restriction filters. The vulnerability is documented in NVD and appears across multip...

CVE-2008-4133

The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote attackers to bypass web restriction filters...

[scip_Advisory 3808] D-Link DIR-100 long url filter evasion

D-Link DIR-100 long url filter evasion scip AG Vulnerability ID 3808 09/08/2008 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3808 I. INTRODUCTION D-Link DIR-100 is a small and cost-effective router and firewall device for small offices and home users. More details are available at the official...

Sun Java System Web Proxy Server Detection

Binary data 4625.prm...

CVE-2008-3683

The CVE-2008-3683 affects Sun Java System Web Proxy Server 4.0–4.0.5 prior to SP6, where an unspecified vulnerability in the FTP subsystem can allow remote attackers to trigger a denial of service by exhausting file descriptors (failure to accept new connections). The issue is described as unknow...

CVE-2008-3683

Unspecified vulnerability in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.5 before SP6 allows remote attackers to cause a denial of service failure to accept connections via unknown vectors, probably related to exhaustion of file descriptors...

Sun Java System Web Proxy Server FTP子系统拒绝服务漏洞

BUGTRAQ ID: 30671 CNCAN ID：CNCAN-2008081410 Sun Java System Web Proxy Server是一款基于JAVA的WEB代理服务程序。 Sun Java System Web Proxy Server 4.0的FTP子系统存在安全问题，本地或远程攻击者可以阻止代理服务器接收新的连接，导致拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Java System Web Proxy Server 4.0.5 Sun Java System Web Proxy Server 4.0 可参考如下安全公告获得补丁信息：...

WebProxy from LunarNight Laboratory vulnerable to cross-site scripting

Overview WebProxy provided by LunarNight Laboratory contains a cross-site scripting vulnerability. WebProxy is a perl script for web proxy provided by LunarNight Laboratory. WebProxy contains a cross-site scripting vulnerability. Shuya Ueki reported this vulnerability to IPA. JPCERT/CC coordinate...