CVE-2004-1350

Sun Java System Web Proxy Server 3.6-3.6 SP4 - Remote Code Execution via CONNECT Request

Title source: llm

Description

Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests.

References (10)

Core 10

Core References

Patch, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/11566

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/17920

Vendor Advisory vendor-advisory x_refsource_sunalert

http://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1&searchclause=security

Various Sources x_refsource_misc

http://www.pentest.co.uk/documents/ptl-2004-06.html

Patch, Vendor Advisory vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1012005

US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/964401

Third Party Advisory, US Government Resource third-party-advisory government-resource x_refsource_ciac

http://www.ciac.org/ciac/bulletins/p-027.shtml

Various Sources third-party-advisory x_refsource_auscert

http://www.auscert.org.au/render.html?it=4516

Patch, Vendor Advisory vdb-entry x_refsource_osvdb

http://www.osvdb.org/displayvuln.php?osvdb_id=11304

Patch, Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/13036/

Scores

EPSS 0.2541

EPSS Percentile 96.3%

Details

Status published

Products (1)

sun/java_system_web_proxy_server 3.6 (5 CPE variants)

Published Oct 30, 2004

Tracked Since Feb 18, 2026