Signature Detail
Short Name |
HTTP:PROXY:PROXYPRO-GET |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Proxy-Pro Professional GateKeeper GET Request Overflow |
Release Date |
2010/04/23 |
Update Number |
1665 |
Supported Platforms |
idp-4.0.110090709+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Proxy-Pro Professional GateKeeper GET Request Overflow
This signature detects attempts to exploit a known vulnerability against Proxy-Pro Professional GateKeeper. A successful attack allows attackers to execute arbitrary code in the context of the software.
Extended Description
Proxy-Pro Professional GateKeeper is prone to a remotely exploitable buffer overrun that may be triggered by passing HTTP GET requests of excessive length through the web proxy component. This could be exploited to execute arbitrary code in the context of the software.
Affected Products
- Proxy-Pro Professional GateKeeper 4.7.0
References
- BugTraq: 9716
- CVE: CVE-2004-0326