Vulnerability Details CVE-2005-1857
Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.016
EPSS Ranking 80.7%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/16567/
- http://sourceforge.net/project/shownotes.php?group_id=604&release_id=351847
- http://www.debian.org/security/2005/dsa-786
- http://www.kb.cert.org/vuls/id/139421
- http://www.securityfocus.com/bid/14666
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22016
- http://secunia.com/advisories/16567/
- http://sourceforge.net/project/shownotes.php?group_id=604&release_id=351847
- http://www.debian.org/security/2005/dsa-786
- http://www.kb.cert.org/vuls/id/139421
- http://www.securityfocus.com/bid/14666
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22016
Products affected by CVE-2005-1857
-
cpe:2.3:a:simpleproxy:simpleproxy:2.2b
-
cpe:2.3:a:simpleproxy:simpleproxy:3.0
-
cpe:2.3:a:simpleproxy:simpleproxy:3.1
-
cpe:2.3:a:simpleproxy:simpleproxy:3.2