CVE-2005-4085

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/18288Patch, Vendor Advisory
http://secunia.com/advisories/18909Patch, Vendor Advisory
http://securitytracker.com/id?1015441Patch, Vendor Advisory
http://www.bluecoat.com/support/knowledge/advisory_host_header_stack_overflow.htmlPatch, Vendor Advisory
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=364Patch, Vendor Advisory
http://www.securityfocus.com/bid/16147Exploit, Patch
http://www.vupen.com/english/advisories/2006/0065
http://www.vupen.com/english/advisories/2006/0622
http://secunia.com/advisories/18288Patch, Vendor Advisory
http://secunia.com/advisories/18909Patch, Vendor Advisory
http://securitytracker.com/id?1015441Patch, Vendor Advisory
http://www.bluecoat.com/support/knowledge/advisory_host_header_stack_overflow.htmlPatch, Vendor Advisory
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=364Patch, Vendor Advisory
http://www.securityfocus.com/bid/16147Exploit, Patch
http://www.vupen.com/english/advisories/2006/0065
http://www.vupen.com/english/advisories/2006/0622

Timeline

Published: Dec 31, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-40865.0Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and e CVE-2005-40877.5PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta a CVE-2005-40887.5SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) parent and CVE-2005-40897.1Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using t CVE-2005-409010.0Unspecified vulnerability in HP-UX B.11.00 to B.11.23, when IPSEC is running, allows remote attackers to have unknown impact.CVE-2005-40914.3Cross-site scripting (XSS) vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote attackers to inject arbitrary web script or H CVE-2005-40927.5Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 (3) and earlier allow remote attacker CVE-2005-40936.5Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to bypass security policie CVE-2005-40947.5connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload command CVE-2005-40955.0Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to list arbitrary f CVE-2005-41267.5** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vul CVE-2005-41307.5** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vul