Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-4505
HistoryOct 12, 2012 - 12:00 a.m.

CVE-2012-4505

2012-10-1200:00:00
ubuntu.com
ubuntu.com
7

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.014 Low

EPSS

Percentile

86.6%

Heap-based buffer overflow in the px_pac_reload function in lib/pac.c in
libproxy 0.2.x and 0.3.x allows remote servers to have an unspecified
impact via a crafted Content-Length size in an HTTP response header for a
proxy.pac file request, a different vulnerability than CVE-2012-4504.

Bugs

Notes

Author Note
jdstrand 0.4 not affected
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchlibproxy< 0.3.1-1ubuntu1.1UNKNOWN
ubuntu11.10noarchlibproxy< 0.3.1-2ubuntu6.1UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.014 Low

EPSS

Percentile

86.6%