CVE-2007-2881

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 25.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-05-29 · updated 2026-06-16

Description

Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation.

Affected products

Sun Java System Web Proxy Server: through 4.0.4

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=536
http://osvdb.org/35841
http://secunia.com/advisories/25405
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102927-1
http://www.kb.cert.org/vuls/id/746889
http://www.securityfocus.com/bid/24165
http://www.securitytracker.com/id?1018130
http://www.vupen.com/english/advisories/2007/1957
https://exchange.xforce.ibmcloud.com/vulnerabilities/34524
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=536
http://osvdb.org/35841
http://secunia.com/advisories/25405

Get alerted when CVE-2007-2881 or the next vulnerability affects your stack