PT-2000-1526 · Winproxy · Winproxy

Published 2000-06-27 · Updated 2008-09-10 · CVE-2000-0592

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WinProxy versions 2.0 through 2.0.1

Description The issue concerns buffer overflows in the POP3 service, allowing remote attackers to execute arbitrary commands. This can be achieved by sending long commands such as USER, PASS, LIST, RETR, or DELE.

Recommendations For WinProxy version 2.0, update to a version that fixes the buffer overflow issue in the POP3 service. For WinProxy version 2.0.1, update to a version that fixes the buffer overflow issue in the POP3 service. As a temporary workaround, consider restricting access to the POP3 service until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2000-0592

Affected Products

Winproxy

References · 5

• 🔥 https://exploit-db.com/exploits/20040 · Exploit
• 🔥 http://securityfocus.com/templates/archive.pike?list=1&msg=[e-mail] · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0592 · Security Note
• http://securityfocus.com/bid/1400 · Note
• http://securityfocus.com/templates/archive.pike?list=1&msg=200006271417.GFE84146.-BJXON%40lac.co.jp · Note