CVEブラウザに戻る

CVE-2001-0028

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1260%

EPSS Percentile43.67th

Published2001年2月12日

Last Modified2026年4月16日

Vulnerability Description

Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands via a large number of " (quotation) characters.

Affected Platforms (CPE)

📦

Igor Khasilev

Oops Proxy Server

= 1.4.22

References & Advisories

🔗 http://archives.neohapsis.com/archives/bugtraq/2000-12/0127.html

🔗 http://archives.neohapsis.com/archives/freebsd/2000-12/0418.html

🔗 http://www.securityfocus.com/bid/2099

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5725

🔗 http://archives.neohapsis.com/archives/bugtraq/2000-12/0127.html

🔗 http://archives.neohapsis.com/archives/freebsd/2000-12/0418.html

🔗 http://www.securityfocus.com/bid/2099

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5725

関連する脆弱性情報

CVE-2001-002910.0

Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitrary commands...

CVE-2005-11215.0

Format string vulnerability in the my_xlog function in lib.c for Oops! Proxy Server 1.5.23 and earlier, as called by the auth func...

CVE-2001-067910.0

A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO co...

CVE-2001-007010.0

Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary com...