CVE-2004-1120

ProZilla (up to 1.3.6-r2 and earlier) is affected by multiple buffer overflow flaws in network protocol handling (http.c, http-retr.c, main.c, etc.), allowing remote code execution via a long Location header. This CVE-2004-1120 is referenced in multiple advisories (Gentoo GLSA 200411-31, Debian D...

CVE-2005-0523

ProZilla: format-string vulnerability in Location header affecting 1.3.7.3 and earlier that enables remote code execution. Debian/DSA-719-1 fixes in prozilla available (1.3.7.4-1 and related) and advisories recommend upgrading.

CVE-2005-2961

CVE-2005-2961 affects ProZilla (notably 1.3.7.4 and possibly earlier) via a buffer overflow in get_string_ahref when -ftpsearch is enabled, allowing remote servers to execute arbitrary code through a crafted HREF in an A tag. Public records in NVD and Debian DSAs indicate a remote code execution ...