Vulnerabilites related to bluecoat - webproxy
Vulnerability from fkie_nvd
Published
2005-12-31 05:00
Modified
2025-04-03 01:03
Severity ?
Summary
Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of packets with 0xFF characters to the Telnet port (TCP 23), which corrupts the heap.
References
cve@mitre.orghttp://secunia.com/advisories/18288Patch, Vendor Advisory
cve@mitre.orghttp://securityreason.com/securityalert/322
cve@mitre.orghttp://securitytracker.com/id?1015442Patch
cve@mitre.orghttp://www.idefense.com/intelligence/vulnerabilities/display.php?id=365Patch, Vendor Advisory
cve@mitre.orghttp://www.securityfocus.com/bid/16149
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/0065
cve@mitre.orghttp://www.winproxy.com/products/relnotes.asp
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/18288Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/322
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1015442Patch
af854a3a-2127-422b-91ae-364da2661108http://www.idefense.com/intelligence/vulnerabilities/display.php?id=365Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/16149
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/0065
af854a3a-2127-422b-91ae-364da2661108http://www.winproxy.com/products/relnotes.asp
Impacted products
Vendor Product Version
bluecoat webproxy 4.0
bluecoat webproxy 4.0
bluecoat webproxy 4.0
bluecoat webproxy 4.0
bluecoat webproxy 4.0
bluecoat webproxy 4.0
bluecoat webproxy 4.0
bluecoat webproxy 4.0
bluecoat webproxy 4.0
bluecoat webproxy 4.0
bluecoat webproxy 5.0
bluecoat webproxy 5.0
bluecoat webproxy 5.0
bluecoat webproxy 5.1
bluecoat webproxy 5.1
bluecoat webproxy 5.1
bluecoat webproxy 5.2
bluecoat webproxy 6.0
bluecoat webproxy 6.0


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1a:*:*:*:*:*:*",
              "matchCriteriaId": "E9F42604-BD02-4BA6-A5FF-FD21E89A208B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1b:*:*:*:*:*:*",
              "matchCriteriaId": "C65BAF2C-EE3A-4465-8C87-D3B8217C90C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1c:*:*:*:*:*:*",
              "matchCriteriaId": "B218FDDC-AAC8-45DA-9329-05C88716C98D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1e:*:*:*:*:*:*",
              "matchCriteriaId": "2AEAA227-062E-4941-BAA2-7C5B985AE490",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1f:*:*:*:*:*:*",
              "matchCriteriaId": "CC64D59C-A6D2-49C7-AE14-AB5CF865133C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1h:*:*:*:*:*:*",
              "matchCriteriaId": "647DA8F0-AE78-4D36-8604-B195F824E250",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1k:*:*:*:*:*:*",
              "matchCriteriaId": "A02B2274-C1F8-4F85-AFE9-CBB1A22A6799",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1m:*:*:*:*:*:*",
              "matchCriteriaId": "FF47AD3F-EE69-4E10-98FC-4E065A1829B4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1n:*:*:*:*:*:*",
              "matchCriteriaId": "053A542C-B0D8-4797-AB63-01EC6AD3D920",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1p:*:*:*:*:*:*",
              "matchCriteriaId": "35E564CD-CFC5-47FF-B947-6AEBF881FEBA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:5.0:r1a:*:*:*:*:*:*",
              "matchCriteriaId": "45781F7C-5808-42DB-BAFB-AA4728667E3C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:5.0:r1b:*:*:*:*:*:*",
              "matchCriteriaId": "6AE1F155-91F6-42D3-872A-6E90BBE05252",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:5.0:r1c:*:*:*:*:*:*",
              "matchCriteriaId": "ED3FE553-7479-4201-BD5F-E59A18C9B2A9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:5.1:r1a:*:*:*:*:*:*",
              "matchCriteriaId": "9A987D90-6AA3-418A-A762-6C0F039BD362",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:5.1:r1d:*:*:*:*:*:*",
              "matchCriteriaId": "1402F05B-8B62-42B4-8CA9-459BCBD9423F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:5.1:r1e:*:*:*:*:*:*",
              "matchCriteriaId": "44C2B2FE-0522-46EE-8236-2D4AD29454AB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:5.2:r1a:*:*:*:*:*:*",
              "matchCriteriaId": "E723F08F-6441-420D-B460-67AA394A009F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:6.0:r1a:*:*:*:*:*:*",
              "matchCriteriaId": "9C4BA708-93AF-4C9B-97C4-CBB37DDB484D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:6.0:r1c:*:*:*:*:*:*",
              "matchCriteriaId": "484077A0-0690-4AD6-95EF-EE29144977D2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of packets with 0xFF characters to the Telnet port (TCP 23), which corrupts the heap."
    }
  ],
  "id": "CVE-2005-3654",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2005-12-31T05:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18288"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securityreason.com/securityalert/322"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://securitytracker.com/id?1015442"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=365"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/16149"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/0065"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.winproxy.com/products/relnotes.asp"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18288"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securityreason.com/securityalert/322"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://securitytracker.com/id?1015442"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=365"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/16149"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/0065"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.winproxy.com/products/relnotes.asp"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2005-12-31 05:00
Modified
2025-04-03 01:03
Severity ?
Summary
Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header.
References
cve@mitre.orghttp://secunia.com/advisories/18288Patch, Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/18909Patch, Vendor Advisory
cve@mitre.orghttp://securitytracker.com/id?1015441Patch, Vendor Advisory
cve@mitre.orghttp://www.bluecoat.com/support/knowledge/advisory_host_header_stack_overflow.htmlPatch, Vendor Advisory
cve@mitre.orghttp://www.idefense.com/intelligence/vulnerabilities/display.php?id=364Patch, Vendor Advisory
cve@mitre.orghttp://www.securityfocus.com/bid/16147Exploit, Patch
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/0065
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/0622
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/18288Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/18909Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1015441Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.bluecoat.com/support/knowledge/advisory_host_header_stack_overflow.htmlPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.idefense.com/intelligence/vulnerabilities/display.php?id=364Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/16147Exploit, Patch
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/0065
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/0622
Impacted products
Vendor Product Version
bluecoat webproxy 4.0
bluecoat webproxy 4.0
bluecoat webproxy 4.0
bluecoat webproxy 4.0
bluecoat webproxy 4.0
bluecoat webproxy 4.0
bluecoat webproxy 4.0
bluecoat webproxy 4.0
bluecoat webproxy 4.0
bluecoat webproxy 4.0
bluecoat webproxy 5.0
bluecoat webproxy 5.0
bluecoat webproxy 5.0
bluecoat webproxy 5.1
bluecoat webproxy 5.1
bluecoat webproxy 5.1
bluecoat webproxy 5.2
bluecoat webproxy 6.0
bluecoat webproxy 6.0
bluecoat proxyav *


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1a:*:*:*:*:*:*",
              "matchCriteriaId": "E9F42604-BD02-4BA6-A5FF-FD21E89A208B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1b:*:*:*:*:*:*",
              "matchCriteriaId": "C65BAF2C-EE3A-4465-8C87-D3B8217C90C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1c:*:*:*:*:*:*",
              "matchCriteriaId": "B218FDDC-AAC8-45DA-9329-05C88716C98D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1e:*:*:*:*:*:*",
              "matchCriteriaId": "2AEAA227-062E-4941-BAA2-7C5B985AE490",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1f:*:*:*:*:*:*",
              "matchCriteriaId": "CC64D59C-A6D2-49C7-AE14-AB5CF865133C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1h:*:*:*:*:*:*",
              "matchCriteriaId": "647DA8F0-AE78-4D36-8604-B195F824E250",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1k:*:*:*:*:*:*",
              "matchCriteriaId": "A02B2274-C1F8-4F85-AFE9-CBB1A22A6799",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1m:*:*:*:*:*:*",
              "matchCriteriaId": "FF47AD3F-EE69-4E10-98FC-4E065A1829B4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1n:*:*:*:*:*:*",
              "matchCriteriaId": "053A542C-B0D8-4797-AB63-01EC6AD3D920",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:4.0:r1p:*:*:*:*:*:*",
              "matchCriteriaId": "35E564CD-CFC5-47FF-B947-6AEBF881FEBA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:5.0:r1a:*:*:*:*:*:*",
              "matchCriteriaId": "45781F7C-5808-42DB-BAFB-AA4728667E3C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:5.0:r1b:*:*:*:*:*:*",
              "matchCriteriaId": "6AE1F155-91F6-42D3-872A-6E90BBE05252",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:5.0:r1c:*:*:*:*:*:*",
              "matchCriteriaId": "ED3FE553-7479-4201-BD5F-E59A18C9B2A9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:5.1:r1a:*:*:*:*:*:*",
              "matchCriteriaId": "9A987D90-6AA3-418A-A762-6C0F039BD362",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:5.1:r1d:*:*:*:*:*:*",
              "matchCriteriaId": "1402F05B-8B62-42B4-8CA9-459BCBD9423F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:5.1:r1e:*:*:*:*:*:*",
              "matchCriteriaId": "44C2B2FE-0522-46EE-8236-2D4AD29454AB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:5.2:r1a:*:*:*:*:*:*",
              "matchCriteriaId": "E723F08F-6441-420D-B460-67AA394A009F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:6.0:r1a:*:*:*:*:*:*",
              "matchCriteriaId": "9C4BA708-93AF-4C9B-97C4-CBB37DDB484D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bluecoat:webproxy:6.0:r1c:*:*:*:*:*:*",
              "matchCriteriaId": "484077A0-0690-4AD6-95EF-EE29144977D2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bluecoat:proxyav:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E857E781-A082-454D-A1F6-1062A7A81783",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header."
    }
  ],
  "id": "CVE-2005-4085",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2005-12-31T05:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18288"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18909"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://securitytracker.com/id?1015441"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.bluecoat.com/support/knowledge/advisory_host_header_stack_overflow.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=364"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/16147"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/0065"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/0622"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18288"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18909"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://securitytracker.com/id?1015441"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.bluecoat.com/support/knowledge/advisory_host_header_stack_overflow.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=364"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/16147"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/0065"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/0622"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2005-3654 (GCVE-0-2005-3654)
Vulnerability from cvelistv5
Published
2006-01-06 00:00
Modified
2024-08-07 23:17
Severity ?
CWE
  • n/a
Summary
Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of packets with 0xFF characters to the Telnet port (TCP 23), which corrupts the heap.
References
http://securitytracker.com/id?1015442vdb-entry, x_refsource_SECTRACK
http://securityreason.com/securityalert/322third-party-advisory, x_refsource_SREASON
http://www.winproxy.com/products/relnotes.aspx_refsource_CONFIRM
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=365third-party-advisory, x_refsource_IDEFENSE
http://www.vupen.com/english/advisories/2006/0065vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/18288third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/bid/16149vdb-entry, x_refsource_BID
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:17:23.394Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1015442",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015442"
          },
          {
            "name": "322",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/322"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.winproxy.com/products/relnotes.asp"
          },
          {
            "name": "20060105 Blue Coat WinProxy Telnet DoS Vulnerability",
            "tags": [
              "third-party-advisory",
              "x_refsource_IDEFENSE",
              "x_transferred"
            ],
            "url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=365"
          },
          {
            "name": "ADV-2006-0065",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/0065"
          },
          {
            "name": "18288",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18288"
          },
          {
            "name": "16149",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16149"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-01-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of packets with 0xFF characters to the Telnet port (TCP 23), which corrupts the heap."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2006-01-11T10:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1015442",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015442"
        },
        {
          "name": "322",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/322"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.winproxy.com/products/relnotes.asp"
        },
        {
          "name": "20060105 Blue Coat WinProxy Telnet DoS Vulnerability",
          "tags": [
            "third-party-advisory",
            "x_refsource_IDEFENSE"
          ],
          "url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=365"
        },
        {
          "name": "ADV-2006-0065",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/0065"
        },
        {
          "name": "18288",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18288"
        },
        {
          "name": "16149",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16149"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3654",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of packets with 0xFF characters to the Telnet port (TCP 23), which corrupts the heap."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1015442",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015442"
            },
            {
              "name": "322",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/322"
            },
            {
              "name": "http://www.winproxy.com/products/relnotes.asp",
              "refsource": "CONFIRM",
              "url": "http://www.winproxy.com/products/relnotes.asp"
            },
            {
              "name": "20060105 Blue Coat WinProxy Telnet DoS Vulnerability",
              "refsource": "IDEFENSE",
              "url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=365"
            },
            {
              "name": "ADV-2006-0065",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/0065"
            },
            {
              "name": "18288",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18288"
            },
            {
              "name": "16149",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16149"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3654",
    "datePublished": "2006-01-06T00:00:00",
    "dateReserved": "2005-11-18T00:00:00",
    "dateUpdated": "2024-08-07T23:17:23.394Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-4085 (GCVE-0-2005-4085)
Vulnerability from cvelistv5
Published
2006-01-06 11:00
Modified
2024-08-07 23:31
Severity ?
CWE
  • n/a
Summary
Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header.
References
http://secunia.com/advisories/18909third-party-advisory, x_refsource_SECUNIA
http://securitytracker.com/id?1015441vdb-entry, x_refsource_SECTRACK
http://www.vupen.com/english/advisories/2006/0622vdb-entry, x_refsource_VUPEN
http://www.vupen.com/english/advisories/2006/0065vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/18288third-party-advisory, x_refsource_SECUNIA
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=364third-party-advisory, x_refsource_IDEFENSE
http://www.bluecoat.com/support/knowledge/advisory_host_header_stack_overflow.htmlx_refsource_CONFIRM
http://www.securityfocus.com/bid/16147vdb-entry, x_refsource_BID
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:31:48.981Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "18909",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18909"
          },
          {
            "name": "1015441",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015441"
          },
          {
            "name": "ADV-2006-0622",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/0622"
          },
          {
            "name": "ADV-2006-0065",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/0065"
          },
          {
            "name": "18288",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18288"
          },
          {
            "name": "20060105 Blue Coat Systems WinProxy Host Header Stack Overflow Vulnerability",
            "tags": [
              "third-party-advisory",
              "x_refsource_IDEFENSE",
              "x_transferred"
            ],
            "url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=364"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.bluecoat.com/support/knowledge/advisory_host_header_stack_overflow.html"
          },
          {
            "name": "16147",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16147"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-01-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2006-01-11T10:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "18909",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18909"
        },
        {
          "name": "1015441",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015441"
        },
        {
          "name": "ADV-2006-0622",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/0622"
        },
        {
          "name": "ADV-2006-0065",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/0065"
        },
        {
          "name": "18288",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18288"
        },
        {
          "name": "20060105 Blue Coat Systems WinProxy Host Header Stack Overflow Vulnerability",
          "tags": [
            "third-party-advisory",
            "x_refsource_IDEFENSE"
          ],
          "url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=364"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.bluecoat.com/support/knowledge/advisory_host_header_stack_overflow.html"
        },
        {
          "name": "16147",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16147"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-4085",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "18909",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18909"
            },
            {
              "name": "1015441",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015441"
            },
            {
              "name": "ADV-2006-0622",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/0622"
            },
            {
              "name": "ADV-2006-0065",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/0065"
            },
            {
              "name": "18288",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18288"
            },
            {
              "name": "20060105 Blue Coat Systems WinProxy Host Header Stack Overflow Vulnerability",
              "refsource": "IDEFENSE",
              "url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=364"
            },
            {
              "name": "http://www.bluecoat.com/support/knowledge/advisory_host_header_stack_overflow.html",
              "refsource": "CONFIRM",
              "url": "http://www.bluecoat.com/support/knowledge/advisory_host_header_stack_overflow.html"
            },
            {
              "name": "16147",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16147"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-4085",
    "datePublished": "2006-01-06T11:00:00",
    "dateReserved": "2005-12-08T00:00:00",
    "dateUpdated": "2024-08-07T23:31:48.981Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}