CVE-2007-2881

CRITICAL 10.0CVE-2007-2881 · Published 29/05/2007 · updated 16/06/2026

Package	Affected versions	Patched versions
java system web proxy server sun	`≤ 4.0.4`	No fix yet

Description

Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation.

References

labs.idefense.com/intelligence/vulnerabilities/display.php · Patch
osvdb.org/35841
secunia.com/advisories/25405
sunsolve.sun.com/search/document.do · Patch
kb.cert.org/vuls/id/746889 · US Government Resource
securityfocus.com/bid/24165
securitytracker.com/id
vupen.com/english/advisories/2007/1957
exchange.xforce.ibmcloud.com/vulnerabilities/34524

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free