CVEブラウザに戻る

CVE-2001-0029

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0820%

EPSS Percentile16.57th

Published2001年2月12日

Last Modified2026年4月16日

Vulnerability Description

Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitrary commands via a long host or domain name that is obtained from a reverse DNS lookup.

Affected Platforms (CPE)

📦

Igor Khasilev

Oops Proxy Server

= 1.4.22

References & Advisories

🔗 http://archives.neohapsis.com/archives/bugtraq/2000-12/0158.html

🔗 http://www.securityfocus.com/bid/2099

🔗 http://zipper.paco.net/~igor/oops/ChangeLog

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/6122

🔗 http://archives.neohapsis.com/archives/bugtraq/2000-12/0158.html

🔗 http://www.securityfocus.com/bid/2099

🔗 http://zipper.paco.net/~igor/oops/ChangeLog

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/6122

関連する脆弱性情報

CVE-2001-002810.0

Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary c...

CVE-2005-11215.0

Format string vulnerability in the my_xlog function in lib.c for Oops! Proxy Server 1.5.23 and earlier, as called by the auth func...

CVE-2001-002110.0

MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate...

CVE-2001-003210.0

Format string vulnerability in ssldump possibly allows remote attackers to cause a denial of service and possibly gain root privil...