VulnerabilityModified

CVE-2004-1350

Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests.

HIGH 7.5EPSS 7.66%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (7.66%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 7.66% probability · 94th percentile
CISA KEV: Not listed
Affected: sun/java system web proxy server
Source: cve@mitre.org

References

http://secunia.com/advisories/13036/Patch, Vendor Advisory
http://securitytracker.com/id?1012005Patch, Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1&searchclause=security
http://www.auscert.org.au/render.html?it=4516
http://www.ciac.org/ciac/bulletins/p-027.shtml
http://www.kb.cert.org/vuls/id/964401US Government Resource
http://www.osvdb.org/displayvuln.php?osvdb_id=11304Patch, Vendor Advisory
http://www.pentest.co.uk/documents/ptl-2004-06.html
http://www.securityfocus.com/bid/11566Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17920
http://secunia.com/advisories/13036/Patch, Vendor Advisory
http://securitytracker.com/id?1012005Patch, Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1&searchclause=security
http://www.auscert.org.au/render.html?it=4516
http://www.ciac.org/ciac/bulletins/p-027.shtml
http://www.kb.cert.org/vuls/id/964401US Government Resource
http://www.osvdb.org/displayvuln.php?osvdb_id=11304Patch, Vendor Advisory
http://www.pentest.co.uk/documents/ptl-2004-06.html
http://www.securityfocus.com/bid/11566Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17920

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.