Back
CVE-2004-0992
Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer.
Published: Mar 1, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (4)
| Vendor | Product | Version |
|---|---|---|
| proxytunnel | proxytunnel | 1.0.6 |
| proxytunnel | proxytunnel | 1.1.3 |
| proxytunnel | proxytunnel | 1.2.2 |
| proxytunnel | proxytunnel | 1.2_.0 |
GitHub Security Advisory GHSA-wj4w-gqp4-cp2c
Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows...
References (8)
- http://proxytunnel.sourceforge.net/news.html
- http://www.gentoo.org/security/en/glsa/glsa-200411-07.xml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/11592 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17945
- http://proxytunnel.sourceforge.net/news.html
- http://www.gentoo.org/security/en/glsa/glsa-200411-07.xml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/11592 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17945
Risk Scores
CVSS Score
10.0 / 10
EPSS Score
4.28%
Top 10% most likely to be exploited
Threat Score
41.3 / 100
Data Sources
NVD
EPSS
GitHub