Secunia

Multiple vulnerabilities have been reported in ProZilla, which can be exploited by malicious people to compromise a user's system.

1) Boundary errors in the communication handling can be exploited via a malicious server to cause buffer overflows by e.g. returning a specially crafted response with an overly long URL in the HTTP "Location" header.

Successful exploitation allows execution of arbitrary code.

NOTE: A working exploit has been published on public mailing lists.

The vulnerability has been reported in version 1.3.6. Other versions may also be affected.

2) A format string error within the processing of server responses can be exploited to execute arbitrary code by returning a specially crafted response containing format specifiers.

The vulnerability has been reported in version 1.3.7.3 and prior.

Solution
Use another product.

Provided and/or discovered by
1) Reported in a Gentoo advisory.
2) Deicide

Changelog
Further details available in Customer Area

Original Advisory
http://security.gentoo.org/glsa/glsa-200411-31.xml

Deep Links
Links available in Customer Area