CVE-2012-0804

Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP response.

• CWE-119

• http://lists.opensuse.org/opensuse-updates/2012-02/msg00064.html
• http://rhn.redhat.com/errata/RHSA-2012-0321.html
• http://secunia.com/advisories/47869Vendor Advisory
• http://secunia.com/advisories/48063Vendor Advisory
• http://secunia.com/advisories/48142Vendor Advisory
• http://secunia.com/advisories/48150
• http://ubuntu.com/usn/usn-1371-1
• http://www.debian.org/security/2012/dsa-2407
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:044
• http://www.osvdb.org/78987
• http://www.securityfocus.com/bid/51943
• http://www.securitytracker.com/id?1026719
• https://bugzilla.redhat.com/show_bug.cgi?id=784141
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73097
• https://security.gentoo.org/glsa/201701-44
• http://lists.opensuse.org/opensuse-updates/2012-02/msg00064.html
• http://rhn.redhat.com/errata/RHSA-2012-0321.html
• http://secunia.com/advisories/47869Vendor Advisory
• http://secunia.com/advisories/48063Vendor Advisory
• http://secunia.com/advisories/48142Vendor Advisory
• http://secunia.com/advisories/48150
• http://ubuntu.com/usn/usn-1371-1
• http://www.debian.org/security/2012/dsa-2407
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:044
• http://www.osvdb.org/78987
• http://www.securityfocus.com/bid/51943
• http://www.securitytracker.com/id?1026719
• https://bugzilla.redhat.com/show_bug.cgi?id=784141
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73097
• https://security.gentoo.org/glsa/201701-44

Published

May 29, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-0798The self-enrolment functionality in Moodle 2.1.x before 2.1.…
• CVE-2012-0799Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an an…
• CVE-2012-0800The form-autocompletion functionality in Moodle 2.0.x before…
• CVE-2012-0801lib/formslib.php in Moodle 2.1.x before 2.1.4 and 2.2.x befo…
• CVE-2012-0802Multiple buffer overflows in Spamdyke before 4.3.0 might all…
• CVE-2012-0803The WS-SP UsernameToken policy in Apache CXF 2.4.5 and 2.5.1…
• CVE-2012-0805Multiple SQL injection vulnerabilities in SQLAlchemy before …
• CVE-2012-0806Buffer overflow in Bip 0.8.8 and earlier might allow remote …
• CVE-2012-0807Stack-based buffer overflow in the suhosin_encrypt_single_co…
• CVE-2012-0808as31 2.3.1-4 does not seed the random number generator and g…
• CVE-2012-0809Format string vulnerability in the sudo_debug function in Su…
• CVE-2012-0810The int3 handler in the Linux kernel before 3.3 relies on a …5.5