CVE-2004-1120

Prozilla Download Accelerator - Buffer Overflow

Title source: rule

Description

Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and earlier allow remote servers to execute arbitrary code via a long Location header.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Serkan Akpolat · cremotelinux

https://www.exploit-db.com/exploits/652

View Code ZIP pw:eip

References (6)

[Issue Tracking] http://bugs.gentoo.org/show_bug.cgi?id=70090

[Vendor Advisory] http://www.gentoo.org/security/en/glsa/glsa-200411-31.xml

[Third Party Advisory] http://www.debian.org/security/2005/dsa-663

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/18210

[Exploit, Vendor Advisory] http://www.securityfocus.com/bid/11734

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/382219

Scores

EPSS 0.1019

EPSS Percentile 93.2%

Details

Status published

Products (10)

prozilla/prozilla_download_accelerator 1.0.0

prozilla/prozilla_download_accelerator 1.3.0

prozilla/prozilla_download_accelerator 1.3.1

prozilla/prozilla_download_accelerator 1.3.2

prozilla/prozilla_download_accelerator 1.3.3

prozilla/prozilla_download_accelerator 1.3.4

prozilla/prozilla_download_accelerator 1.3.5

prozilla/prozilla_download_accelerator 1.3.5.1

prozilla/prozilla_download_accelerator 1.3.5.2

prozilla/prozilla_download_accelerator 1.3.6

Published Jan 10, 2005

Tracked Since Feb 18, 2026