CVE-2004-0992

CRITICAL 10.0CVE-2004-0992 · Published 01/03/2005 · updated 16/06/2026

In short

CVE-2004-0992 is a CRITICAL (CVSS 10.0) vulnerability affecting proxytunnel (proxytunnel).
Chance of exploitation in the next 30 days (EPSS): 4.3%, higher than 91.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
proxytunnel proxytunnel	`= 1.0.6= 1.1.3= 1.2.2= 1.2_.0`	No fix yet

Description

Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer.

References

proxytunnel.sourceforge.net/news.html
gentoo.org/security/en/glsa/glsa-200411-07.xml · Patch
securityfocus.com/bid/11592 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/17945

More vulnerabilities in proxytunnel

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free