漏洞描述
Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header.
影响产品
暂无结构化产品信息。
修复建议
建议关注厂商安全公告,及时升级至已修复版本,并结合实际资产暴露情况采取缓解措施。
参考链接
www.vupen.comhttp://www.vupen.com/english/advisories/2006/0065↗secunia.comhttp://secunia.com/advisories/18909↗securitytracker.comhttp://securitytracker.com/id?1015441↗www.bluecoat.comhttp://www.bluecoat.com/support/knowledge/advisory_host_header_stack_overflow.html↗www.idefense.comhttp://www.idefense.com/intelligence/vulnerabilities/display.php?id=364↗www.securityfocus.comhttp://www.securityfocus.com/bid/16147↗www.vupen.comhttp://www.vupen.com/english/advisories/2006/0622↗secunia.comhttp://secunia.com/advisories/18288↗