cpe:/a:proxytunnel:proxytunnel:1.0.6 cpe:/a:proxytunnel:proxytunnel:1.1.3 cpe:/a:proxytunnel:proxytunnel:1.2.2 cpe:/a:proxytunnel:proxytunnel:1.2_.0 CVE-2004-0992 2005-03-01T00:00:00.000-05:00 2017-07-10T21:30:38.573-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 11592 GENTOO GLSA-200411-07 CONFIRM http://proxytunnel.sourceforge.net/news.html XF proxytunnel-message-format-string(17945) Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer.