Youngzsoft CCProxy Logging Function Unspecified Remote Buffer Overflow Vulnerability

Bugtraq ID:	11666
Class:	Boundary Condition Error
CVE:	CVE-2004-2416
Remote:	Yes
Local:	No
Published:	Nov 11 2004 12:00AM
Updated:	Sep 05 2007 06:51PM
Credit:	Discovery is credited to Isno.
Vulnerable:	Youngzsoft CCProxy 6.0
Not Vulnerable:

Youngzsoft CCProxy Logging Function Unspecified Remote Buffer Overflow Vulnerability

CCProxy is reported prone to an unspecified remote buffer-overflow vulnerability. Exploiting this issue may allow remote attackers to execute arbitrary code on a vulnerable computer and gain unauthorized access.

All versions of CCProxy are considered vulnerable at this time.

Youngzsoft CCProxy Logging Function Unspecified Remote Buffer Overflow Vulnerability

Exploit code as well as a Metasploit module are available:

• /data/vulnerabilities/exploits/CCProxy_exp.c
• /data/vulnerabilities/exploits/ccproxy_telnet_proxy_ping.msf

Youngzsoft CCProxy Logging Function Unspecified Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Youngzsoft CCProxy Logging Function Unspecified Remote Buffer Overflow Vulnerability

References:

• CCProxy Buffer Overflow in Logging Function Lets Remote Users Execute Code (SecurityTracker)