VULNERABILITY INTELLIGENCE

CVE-2004-0992

CVSS score10 HIGH
EPSS probability4.28%
CISA KEVNot currently listed
Published2005-03-01
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer.

Primary references