PT-2005-4817 · Blue Coat · Bluecoat Winproxy+1

Publicado 2005-12-31 · Atualizado 2011-03-08 · CVE-2005-4085

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BlueCoat WinProxy versions prior to 6.1a BlueCoat ProxyAV versions prior to 2.4.2.3

Description The issue is related to a buffer overflow that allows remote attackers to execute arbitrary code. This is achieved by sending a long Host: header.

Recommendations For BlueCoat WinProxy versions prior to 6.1a, update to version 6.1a or later. For BlueCoat ProxyAV versions prior to 2.4.2.3, update to version 2.4.2.3 or later.

Exploit

Correção

Identificadores relacionados

CVE-2005-4085

Produtos afetados

Bluecoat Proxyav

Bluecoat Winproxy

Referências · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/proxy/bluecoat_winproxy_host.rb · Exploit
• 🔥 http://securityfocus.com/bid/16147 · Exploit
• 🔥 https://exploit-db.com/exploits/1408 · Exploit
• 🔥 https://exploit-db.com/exploits/16691 · Exploit
• http://vupen.com/english/advisories/2006/0065 · Nota
• http://vupen.com/english/advisories/2006/0622 · Nota
• http://idefense.com/intelligence/vulnerabilities/display.php?id=364 · Aviso do Fabricante
• http://bluecoat.com/support/knowledge/advisory_host_header_stack_overflow.html · Aviso do Fabricante
• http://secunia.com/advisories/18288 · Aviso do Fabricante
• http://secunia.com/advisories/18909 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-4085 · Nota de Segurança
• http://securitytracker.com/id?1015441 · Aviso do Fabricante