CVE-2007-2881
Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy...
CVE-2007-2881 is a high vulnerability (CVSS 10.0) in Sun Java System Web Proxy Server, published May 29, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 25.7%, the 97th percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 25.7%EPSS, 97th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation.
Exploit likelihood
Affected products
What each source reports
NVD Score used
Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation.
- Record
CVE-2007-2881- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation.
- Record
CVE-2007-2881- Updated
- 2026-11-02
EUVDEUVD-2007-2873No score
Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation.
- Record
EUVD-2007-2873- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jm2g-5vc2-gxvpNo score
Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy...
Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation.
- Record
GHSA-jm2g-5vc2-gxvp- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.