Back
CVE-2005-1857
Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply.
Published: Sep 2, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (4)
| Vendor | Product | Version |
|---|---|---|
| simpleproxy | simpleproxy | 2.2b |
| simpleproxy | simpleproxy | 3.0 |
| simpleproxy | simpleproxy | 3.1 |
| simpleproxy | simpleproxy | 3.2 |
GitHub Security Advisory GHSA-xp5q-vpr4-hc8h
Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to...
References (12)
- http://secunia.com/advisories/16567/ Vendor Advisory
- http://sourceforge.net/project/shownotes.php?group_id=604&release_id=351847 Patch
- http://www.debian.org/security/2005/dsa-786 Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/139421 US Government Resource
- http://www.securityfocus.com/bid/14666 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22016
- http://secunia.com/advisories/16567/ Vendor Advisory
- http://sourceforge.net/project/shownotes.php?group_id=604&release_id=351847 Patch
- http://www.debian.org/security/2005/dsa-786 Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/139421 US Government Resource
- http://www.securityfocus.com/bid/14666 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22016
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
4.32%
Top 10% most likely to be exploited
Threat Score
31.3 / 100
Data Sources
NVD
EPSS
GitHub