CVE-2005-4085 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 65.9% (pctl 99)
Patch early
A public exploit exists.
Description
Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 65.93% — more likely to be exploited than 99% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2005-12-31 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| bluecoat | proxyav |
| bluecoat | webproxy |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Blue Coat WinProxy - Host Header Overflow (Metasploit) | 2010-07-12 |
| exploit-db | BlueCoat WinProxy 6.0 R1c - 'Host' Remote Stack Overflow (SEH) | 2006-01-07 |
References
- http://secunia.com/advisories/18288
- http://secunia.com/advisories/18909
- http://securitytracker.com/id?1015441
- http://www.bluecoat.com/support/knowledge/advisory_host_header_stack_overflow.html
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=364
- http://www.securityfocus.com/bid/16147
- http://www.vupen.com/english/advisories/2006/0065
- http://www.vupen.com/english/advisories/2006/0622
- http://secunia.com/advisories/18288
- http://secunia.com/advisories/18909
- http://securitytracker.com/id?1015441
- http://www.bluecoat.com/support/knowledge/advisory_host_header_stack_overflow.html
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=364
- http://www.securityfocus.com/bid/16147
- http://www.vupen.com/english/advisories/2006/0065
- http://www.vupen.com/english/advisories/2006/0622
→ the Explorer · watch your stack · NVD