{"api_version":"1","generated_at":"2026-07-23T04:31:27+00:00","cve":"CVE-2004-1350","urls":{"html":"https://cve.report/CVE-2004-1350","api":"https://cve.report/api/cve/CVE-2004-1350.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2004-1350","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2004-1350"},"summary":{"title":"CVE-2004-1350","description":"Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests.","state":"PUBLISHED","assigner":"mitre","published_at":"2004-10-30 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.pentest.co.uk/documents/ptl-2004-06.html","name":"http://www.pentest.co.uk/documents/ptl-2004-06.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Page not found | Pentest","mime":"text/xml","httpstatus":"404","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/964401","name":"http://www.kb.cert.org/vuls/id/964401","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"US-CERT Vulnerability Note VU#964401","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1&searchclause=security","name":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1&searchclause=security","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"#57606: Buffer Overflow Vulnerabilities in Sun Java System Web Proxy Server java.lang.NullPointerException","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/11566","name":"http://www.securityfocus.com/bid/11566","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Sun Java System Web Proxy Server Multiple Unspecified Buffer Overflow Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17920","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17920","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ciac.org/ciac/bulletins/p-027.shtml","name":"http://www.ciac.org/ciac/bulletins/p-027.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"P-027: Sun Java System Web Proxy Server Buffer Overflow Vulnerability","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://securitytracker.com/id?1012005","name":"http://securitytracker.com/id?1012005","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"SecurityTracker.com Archives - Sun Java System Web Proxy Server Buffer Overflow May Let Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/13036/","name":"http://secunia.com/advisories/13036/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Secunia - Advisories - Sun Java System Web Proxy Server Unspecified Buffer Overflow Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=11304","name":"http://www.osvdb.org/displayvuln.php?osvdb_id=11304","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.auscert.org.au/render.html?it=4516","name":"http://www.auscert.org.au/render.html?it=4516","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"AusCERT - ESB-2004.0691 -- Sun Alert Notification 57606 -- Buffer Overflow Vulnerabilities in Sun Java System Web Proxy Server","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-1350","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1350","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2004","cve_id":"1350","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sun","cpe5":"java_system_web_proxy_server","cpe6":"3.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"1350","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sun","cpe5":"java_system_web_proxy_server","cpe6":"3.6","cpe7":"sp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"1350","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sun","cpe5":"java_system_web_proxy_server","cpe6":"3.6","cpe7":"sp2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"1350","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sun","cpe5":"java_system_web_proxy_server","cpe6":"3.6","cpe7":"sp3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"1350","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sun","cpe5":"java_system_web_proxy_server","cpe6":"3.6","cpe7":"sp4","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T00:46:12.342Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"11566","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/11566"},{"name":"1012005","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1012005"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.pentest.co.uk/documents/ptl-2004-06.html"},{"name":"57606","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1&searchclause=security"},{"name":"VU#964401","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/964401"},{"name":"P-027","tags":["third-party-advisory","government-resource","x_refsource_CIAC","x_transferred"],"url":"http://www.ciac.org/ciac/bulletins/p-027.shtml"},{"name":"ESB-2004.0691","tags":["third-party-advisory","x_refsource_AUSCERT","x_transferred"],"url":"http://www.auscert.org.au/render.html?it=4516"},{"name":"11304","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=11304"},{"name":"13036","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/13036/"},{"name":"sun-web-proxy-bo(17920)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17920"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2004-10-29T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-10T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"11566","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/11566"},{"name":"1012005","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1012005"},{"tags":["x_refsource_MISC"],"url":"http://www.pentest.co.uk/documents/ptl-2004-06.html"},{"name":"57606","tags":["vendor-advisory","x_refsource_SUNALERT"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1&searchclause=security"},{"name":"VU#964401","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/964401"},{"name":"P-027","tags":["third-party-advisory","government-resource","x_refsource_CIAC"],"url":"http://www.ciac.org/ciac/bulletins/p-027.shtml"},{"name":"ESB-2004.0691","tags":["third-party-advisory","x_refsource_AUSCERT"],"url":"http://www.auscert.org.au/render.html?it=4516"},{"name":"11304","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=11304"},{"name":"13036","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/13036/"},{"name":"sun-web-proxy-bo(17920)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17920"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2004-1350","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"11566","refsource":"BID","url":"http://www.securityfocus.com/bid/11566"},{"name":"1012005","refsource":"SECTRACK","url":"http://securitytracker.com/id?1012005"},{"name":"http://www.pentest.co.uk/documents/ptl-2004-06.html","refsource":"MISC","url":"http://www.pentest.co.uk/documents/ptl-2004-06.html"},{"name":"57606","refsource":"SUNALERT","url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1&searchclause=security"},{"name":"VU#964401","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/964401"},{"name":"P-027","refsource":"CIAC","url":"http://www.ciac.org/ciac/bulletins/p-027.shtml"},{"name":"ESB-2004.0691","refsource":"AUSCERT","url":"http://www.auscert.org.au/render.html?it=4516"},{"name":"11304","refsource":"OSVDB","url":"http://www.osvdb.org/displayvuln.php?osvdb_id=11304"},{"name":"13036","refsource":"SECUNIA","url":"http://secunia.com/advisories/13036/"},{"name":"sun-web-proxy-bo(17920)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17920"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2004-1350","datePublished":"2005-01-19T05:00:00.000Z","dateReserved":"2005-01-06T00:00:00.000Z","dateUpdated":"2024-08-08T00:46:12.342Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2004-10-30 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:3.6:*:*:*:*:*:*:*","matchCriteriaId":"D36EE342-0A55-4F2E-9037-14C0975CEA9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp1:*:*:*:*:*:*","matchCriteriaId":"DD35DA64-83B8-4EF4-94E8-D692E6FDD0AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp2:*:*:*:*:*:*","matchCriteriaId":"BB5D85FB-D4A6-4518-BBD9-8D021446E433"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp3:*:*:*:*:*:*","matchCriteriaId":"A1102A86-8FB6-418E-808E-A6B94016E0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp4:*:*:*:*:*:*","matchCriteriaId":"E6A1EC8B-311D-4D34-A669-FF52B29BB5C3"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2004","CveId":"1350","Ordinal":"1","Title":"CVE-2004-1350","CVE":"CVE-2004-1350","Year":"2004"},"notes":[{"CveYear":"2004","CveId":"1350","Ordinal":"1","NoteData":"Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests.","Type":"Description","Title":"CVE-2004-1350"},{"CveYear":"2004","CveId":"1350","Ordinal":"2","NoteData":"2005-01-19","Type":"Other","Title":"Published"},{"CveYear":"2004","CveId":"1350","Ordinal":"3","NoteData":"2017-07-10","Type":"Other","Title":"Modified"}]}}}