CVE-2004-1350

Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests.

Published: Oct 30, 2004
Updated: Apr 13, 2023
CVE: CVE-2004-1350
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
sun / java_system_web_proxy_server	3.6-sp1	3.6-sp1.x
sun / java_system_web_proxy_server	3.6-sp2	3.6-sp2.x
sun / java_system_web_proxy_server	3.6-sp4	3.6-sp4.x
sun / java_system_web_proxy_server	3.6-sp3	3.6-sp3.x
sun / java_system_web_proxy_server	3.6	3.6.x

http://secunia.com/advisories/13036/
http://securitytracker.com/id?1012005
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1&searchclause=security
http://www.auscert.org.au/render.html?it=4516
http://www.ciac.org/ciac/bulletins/p-027.shtml
http://www.kb.cert.org/vuls/id/964401
http://www.osvdb.org/displayvuln.php?osvdb_id=11304
http://www.pentest.co.uk/documents/ptl-2004-06.html
http://www.securityfocus.com/bid/11566
https://exchange.xforce.ibmcloud.com/vulnerabilities/17920

Vulnerability Database

289,697

CVE-2004-1350