CVE-2005-4085: Buffer Overflow
Published Dec 31, 2005
·Updated
Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header.
Affected Software
20 affected components
bluecoat Webproxy=5.0-r1c
bluecoat Webproxy=4.0-r1h
bluecoat Webproxy=5.0-r1b
bluecoat Webproxy=4.0-r1e
bluecoat Webproxy=4.0-r1b
bluecoat Webproxy=4.0-r1a
bluecoat Webproxy=5.2-r1a
bluecoat Webproxy=4.0-r1k
bluecoat Webproxy=4.0-r1f
bluecoat Webproxy=5.1-r1d
bluecoat Webproxy=4.0-r1c
bluecoat Webproxy=5.0-r1a
bluecoat Webproxy=5.1-r1a
bluecoat Webproxy=5.1-r1e
bluecoat Webproxy=4.0-r1n
bluecoat Webproxy=6.0-r1c
bluecoat Webproxy=6.0-r1a
bluecoat Webproxy=4.0-r1m
bluecoat Webproxy=4.0-r1p
bluecoat ProxyAV
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Dec 31, 2005
CVE Published
05:00 AM
Jan 6, 2006
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-4085?
CVE-2005-4085 has a high severity level due to the potential for remote code execution.
2
How do I fix CVE-2005-4085?
To fix CVE-2005-4085, upgrade to BlueCoat WinProxy version 6.1a or later for affected versions.
3
What specific systems are affected by CVE-2005-4085?
CVE-2005-4085 affects BlueCoat WinProxy versions prior to 6.1a and ProxyAV versions prior to 2.4.2.3.
4
Can CVE-2005-4085 be exploited remotely?
Yes, CVE-2005-4085 can be exploited remotely through a crafted long Host: header.
5
What type of vulnerability is CVE-2005-4085?
CVE-2005-4085 is a buffer overflow vulnerability that can lead to arbitrary code execution.