Main
Vulnerability Database
Exploits
ID:9250 - Exploit for Buffer overflow in tinyproxy - CVE-2001-0129
ID:9250 - Exploit for Buffer overflow in tinyproxy - CVE-2001-0129
Published: August 20, 2023
Vulnerability identifier: #VU79735
Vulnerability risk: High
CVE-ID: CVE-2001-0129
CWE-ID: CWE-119
Exploitation vector: Remote access
Vulnerable software:
tinyproxy
tinyproxy
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing CONNECT requests. A remote attacker can send an overly long CONNECT request to the server, trigger memory corruption and execute arbitrary code on the target system.
Remediation
Install updates from vendor's website.