CVE-2005-1857: Simpleproxy

High severity, CVSS 7.5. EPSS: 4.3% chance of exploitation in the next 30 days.

Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply.

Affected products

• Simpleproxy Simpleproxy: version 2.2b only; version 3.0 only; version 3.1 only; version 3.2 only

Published 2005-09-02. Last modified 2026-06-16.