Vulnerabilities > CVE-2004-2114 - Stack and Heap Overflow vulnerability in Internetnow Proxynow 2.6/2.75

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
internetnow
critical
exploit available
NVD
Published: 2004-12-31
Updated: 2017-07-11

Summary

Stack-based and heap-based buffer overflows in ProxyNow! 2.75 and earlier allow remote attackers to execute arbitrary code via a GET request with a long ftp:// URL.

Vulnerable Configurations

Part Description Count
Application
Internetnow
2

Exploit-Db

descriptionInternetNow ProxyNow 2.6/2.75 Multiple Stack and Heap Overflow Vulnerabilities. CVE-2004-2114 . Remote exploit for windows platform
idEDB-ID:23608
last seen2016-02-02
modified2004-01-26
published2004-01-26
reporterPeter Winter-Smith
sourcehttps://www.exploit-db.com/download/23608/
titleInternetNow ProxyNow 2.6/2.75 - Multiple Stack and Heap Overflow Vulnerabilities

References