FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-1120

This CVE name corresponds to:

Entered	Topic
2004-11-25	ProZilla -- server response buffer overflow vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-1120 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-1120
Phase	Assigned(20041130)

Description

Mulitple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and earlier allow remote servers to execute arbitrary code via a long Location header.

References

Source	Reference
GENTOO	GLSA-200411-31
CONFIRM	http://bugs.gentoo.org/show_bug.cgi?id=70090
BUGTRAQ	20041124 Prozilla Remote Exploit
DEBIAN	DSA-663
BID	11734
XF	prozilla-bo(18210)