CVEvulnerability

CVE-2007-2881

10.0 HIGH Published 2007-05-29 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-05-29
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation.

Affected configurations

• sun java system web proxy server (<= 4.0.4)

References