3proxy: buffer overflow
| Package(s): | 3proxy | CVE #(s): | CVE-2007-2031 | ||||
| Created: | April 23, 2007 | Updated: | April 25, 2007 | ||||
| Description: | The 3proxy development team reported a buffer overflow in the logurl() function when processing overly long requests. A remote attacker could send a specially crafted transparent request to the proxy, resulting in the execution of arbitrary code with privileges of the user running 3proxy. This has been fixed in the 3proxy 0.5.3i bugfix release. | ||||||
| Alerts: |
| ||||||