Back to CVE Browser

CVE-2001-0028

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1260%

EPSS Percentile43.67th

PublishedFeb 12, 2001

Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands via a large number of " (quotation) characters.

Affected Platforms (CPE)

📦

Igor Khasilev

Oops Proxy Server

= 1.4.22

References & Advisories

🔗 http://archives.neohapsis.com/archives/bugtraq/2000-12/0127.html

🔗 http://archives.neohapsis.com/archives/freebsd/2000-12/0418.html

🔗 http://www.securityfocus.com/bid/2099

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5725

🔗 http://archives.neohapsis.com/archives/bugtraq/2000-12/0127.html

🔗 http://archives.neohapsis.com/archives/freebsd/2000-12/0418.html

🔗 http://www.securityfocus.com/bid/2099

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5725

Related Vulnerabilities

CVE-2001-002910.0

Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitrary commands...

CVE-2005-11215.0

Format string vulnerability in the my_xlog function in lib.c for Oops! Proxy Server 1.5.23 and earlier, as called by the auth func...

CVE-2001-067910.0

A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO co...

CVE-2001-002110.0

MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate...