CCProxy < 6.3 Logging Function HTTP GET Request Remote Overflow

Medium Nessus Network Monitor Plugin ID 2412

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote host is running CCProxy, an application proxy supporting many protocols (Telnet, FTP, WWW, and more). There is a buffer overflow in the remote version of this software that may allow an attacker to execute arbitrary code on the remote host with the privileges of the user running the proxy.

Solution

Upgrade to CCProxy 6.3 or higher.

See Also

http://archives.neohapsis.com/archives/secunia/2004-q4/0449.html

http://www.securiteam.com/exploits/6E0032KBPM.html

Plugin Details

Severity: Medium

ID: 2412

Family: SMTP Servers

Published: 2004/11/22

Modified: 2018/07/11

Dependencies: 2004, 2005

Nessus ID: 15774

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 5.8

Temporal Score: 5.5

Vector: CVSS2#AV:A/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:F/RL:U/RC:ND

CVSSv3

Base Score: 6.3

Temporal Score: 6.2

Vector: CVSS3#AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS3#E:F/RL:U/RC:X

Vulnerability Information

CPE: cpe:/a:youngzsoft:ccproxy

Exploitable With

Metasploit (CCProxy <= v6.2 Telnet Proxy Ping Overflow)

Reference Information

CVE: CVE-2004-2416

BID: 11666