CVE-2004-1350

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-10-30 · updated 2026-06-16

Description

Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests.

Affected products

Sun Java System Web Proxy Server: 3.6, 3.6-sp1, 3.6-sp2, 3.6-sp3, 3.6-sp4

References

http://secunia.com/advisories/13036/
http://securitytracker.com/id?1012005
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1&searchclause=security
http://www.auscert.org.au/render.html?it=4516
http://www.ciac.org/ciac/bulletins/p-027.shtml
http://www.kb.cert.org/vuls/id/964401
http://www.osvdb.org/displayvuln.php?osvdb_id=11304
http://www.pentest.co.uk/documents/ptl-2004-06.html
http://www.securityfocus.com/bid/11566
https://exchange.xforce.ibmcloud.com/vulnerabilities/17920
http://secunia.com/advisories/13036/
http://securitytracker.com/id?1012005

Get alerted when CVE-2004-1350 or the next vulnerability affects your stack