CVE-2001-0129

CVE-2001-0129 describes a critical buffer overflow vulnerability in Tinyproxy HTTP proxy versions 1.3.3 and earlier. This flaw allows remote attackers to trigger a denial of service and potentially execute arbitrary code by sending a crafted, excessively long connect request. With a CVSS score of 10.0 (HIGH), it represents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, an exploit for a remote heap overflow in Tinyproxy 1.3.2/1.3.3 is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.