Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Potential arbitrary code execution vulnerability in tinyproxy

Package(s):

tinyproxy

CVE #(s):

Created:

August 14, 2002

Updated:

August 15, 2002

Description:

Tinyproxy, a lightweight HTTP proxy, handles some invalid proxy requests incorrectly.

Under some circumstances, an invalid request may result in a allocated memory being freed twice. This can potentially result in the execution of arbitrary code.

Alerts:

Debian

DSA-145-1

2002-08-07

(Log in to post comments)