Unscored severity · published May 29, 2007
CVE-2007-2881
Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted…
–
CVSS
25.7%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation.
Exploitation
Is it being used?
Exploit prediction (EPSS)25.7% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JS
Java System Web Proxy Server · Sun
through 4.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2881
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2881
Patch
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=536
osvdb.org
http://osvdb.org/35841
secunia.com
http://secunia.com/advisories/25405
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102927-1
US Government Resource
http://www.kb.cert.org/vuls/id/746889
www.securityfocus.com
http://www.securityfocus.com/bid/24165
More from Java System Web Proxy Server
–
CVE-2008-4541
Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET…
–
CVE-2008-3683
Unspecified vulnerability in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.5 before SP6 allows remote attackers to cause a denial of service (failure to…
–
CVE-2007-6569
Cross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web…
–
CVE-2007-6570
Cross-site scripting (XSS) vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11 allows remote…
–
CVE-2007-6571
Cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows allows remote attackers to inject arbitrary web script or HTML via…