Test ID:	1.3.6.1.4.1.25623.1.0.11164
Category:	Gain a shell remotely
Title:	SOCKS4 Username Overflow DoS Vulnerability
Summary:	It was possible to kill the remote SOCKS4 server by; sending a request with a too long username.
Description:	Summary: It was possible to kill the remote SOCKS4 server by sending a request with a too long username. Vulnerability Impact: An attacker may exploit this vulnerability to make your SOCKS server crash continually or even execute arbitrary code on your system. Affected Software/OS: AN HTTPD is known to be affected. Other products might be affected as well. Solution: Upgrade your software. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2002-2368 BugTraq ID: 5145 http://www.securityfocus.com/bid/5145 BugTraq ID: 5147 http://www.securityfocus.com/bid/5147 Bugtraq: 20020703 NEC's socks5 (Re: Foundstone Advisory - Buffer Overflow in AnalogX Proxy (fwd)) (Google Search) http://archives.neohapsis.com/archives/bugtraq/2002-07/0033.html http://www.iss.net/security_center/static/9485.php
Copyright	Copyright (C) 2002 Michel Arboi

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.