CVE-2007-2881: Buffer Overflow
Published May 29, 2007
·Updated
Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation.
Affected Software
1 affected component
Sun Java System Web Proxy Server<=4.0.4
Remediation
Event History
May 29, 2007
CVE Published
08:30 PM
May 30, 2007
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-2881?
CVE-2007-2881 is categorized as a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2007-2881?
To address CVE-2007-2881, upgrade the Sun Java System Web Proxy Server to version 4.0.5 or later.
3
What systems are affected by CVE-2007-2881?
CVE-2007-2881 affects Sun Java System Web Proxy Server versions prior to 4.0.5.
4
What type of attack does CVE-2007-2881 involve?
CVE-2007-2881 involves remote attackers exploiting stack-based buffer overflows through crafted packets.
5
Can CVE-2007-2881 be exploited from the same local network?
Yes, CVE-2007-2881 can be exploited remotely, making it possible for attackers on the same local network to execute arbitrary code.