PT-2007-3374 · 3Proxy · 3Proxy

Boris16 · Published 2007-04-16 · Updated 2018-10-16 · CVE-2007-2031

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions 3proxy versions 0.5 through 0.5.3g 3proxy version 0.6b-devel before 20070413

Description A buffer overflow issue exists in the HTTP proxy service, potentially allowing remote attackers to execute arbitrary code via crafted transparent requests.

Recommendations For 3proxy versions 0.5 through 0.5.3g, update to a version later than 0.5.3g. For 3proxy version 0.6b-devel before 20070413, update to a version from 20070413 or later.

Exploit

Fix

Related Identifiers

CVE-2007-2031

Affected Products

3Proxy

References · 12

• 🔥 https://exploit-db.com/exploits/3822 · Exploit
• 🔥 https://exploit-db.com/exploits/3821 · Exploit
• 🔥 https://exploit-db.com/exploits/3829 · Exploit
• http://security.gentoo.org/glsa/glsa-200704-17.xml · Vendor Advisory
• http://3proxy.ru/0.5.3h/Changelog.txt · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-2031 · Security Note
• http://secunia.com/advisories/24961 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33841 · Note
• http://vupen.com/english/advisories/2007/1442 · Note
• http://securityfocus.com/archive/1/466650/100/100/threaded · Note
• http://securityfocus.com/bid/23545 · Note
• http://secunia.com/advisories/25001 · Note