CVE-2007-2881: Buffer Overflow
First published: Tue May 29 2007(Updated: )
Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Sun Java System Web Proxy Server | <=4.0.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=536
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102927-1
- http://www.kb.cert.org/vuls/id/746889
- http://www.securityfocus.com/bid/24165
- http://www.securitytracker.com/id?1018130
- http://secunia.com/advisories/25405
- http://www.vupen.com/english/advisories/2007/1957
- http://osvdb.org/35841
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34524
Frequently Asked Questions
What is the severity of CVE-2007-2881?
CVE-2007-2881 is categorized as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2007-2881?
To address CVE-2007-2881, upgrade the Sun Java System Web Proxy Server to version 4.0.5 or later.
What systems are affected by CVE-2007-2881?
CVE-2007-2881 affects Sun Java System Web Proxy Server versions prior to 4.0.5.
What type of attack does CVE-2007-2881 involve?
CVE-2007-2881 involves remote attackers exploiting stack-based buffer overflows through crafted packets.
Can CVE-2007-2881 be exploited from the same local network?
Yes, CVE-2007-2881 can be exploited remotely, making it possible for attackers on the same local network to execute arbitrary code.
- agent/softwarecombine
- agent/remedy
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/sun
- canonical/oracle sun java system web proxy server
- version/oracle sun java system web proxy server/4.0.4