PT-2005-4411 · Blue Coat Systems · Winproxy

Fistfuxxer · Published 2005-12-31 · Updated 2011-03-08 · CVE-2005-3654

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Blue Coat Systems Inc. WinProxy versions prior to 6.1a

Description The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by sending a large number of packets with 0xFF characters to the Telnet port (TCP 23), which corrupts the heap.

Recommendations For versions prior to 6.1a, update to version 6.1a or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-3654

Affected Products

Winproxy

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2005-3654 · Security Note
• http://securitytracker.com/id?1015442 · Patch
• http://secunia.com/advisories/18288 · Vendor Advisory
• http://idefense.com/intelligence/vulnerabilities/display.php?id=365 · Vendor Advisory
• http://securityfocus.com/bid/16149 · Note
• http://vupen.com/english/advisories/2006/0065 · Note
• http://winproxy.com/products/relnotes.asp · Note
• http://securityreason.com/securityalert/322 · Note