CVE-2005-4085
BlueCoat WinProxy < 6.1a and ProxyAV < 2.4.2.3 - Remote Code Execution via Long Host Header
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2005-4085.
PoCs published by Metasploit, FistFuXXer, including Metasploit module exploits/windows/proxy/bluecoat_winproxy_host.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Blue Coat WinProxy by sending a maliciously crafted HTTP request with an overly long Host header. The payload leverages SEH (Structured Exception Handler) overwrites to achieve remote code execution.
Description
Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header.
Exploits (3)
This exploit targets a buffer overflow vulnerability in Blue Coat WinProxy by sending a maliciously crafted HTTP request with an overly long Host header. The payload leverages SEH (Structured Exception Handler) overwrites to achieve remote code execution.
This exploit targets a stack/SEH overflow vulnerability in WinProxy 6.0 R1c. It sends a maliciously crafted HTTP request to overwrite the SE handler and execute a bind shell payload on port 4444.
This Metasploit module exploits a buffer overflow in Blue Coat WinProxy by sending a maliciously crafted HTTP Host header with an overly long port value. The exploit leverages SEH overwrites to achieve remote code execution on vulnerable systems.