CVE-2005-3654 Memory corruption in n/a
Remote attackers can crash the WinProxy server or execute arbitrary code by sending malformed Telnet packets, requiring an upgrade to version 6.1a.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2005-3654?
CVE-2005-3654 is a high-severity memory corruption vulnerability in n/a, published on 6 Jan 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of packets with 0xFF characters to the Telnet port (TCP 23), which corrupts the heap.
Which versions are affected by CVE-2005-3654?
It affects 1 product.
Products include Bluecoat Webproxy.
How do I fix CVE-2005-3654?
No fix has been published for CVE-2005-3654 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2005-3654 being exploited?
There is no known exploitation of CVE-2005-3654 in the wild and no public exploit code.
Sources
Also known as GHSA-4f85-wphf-9gf3.