CVE-2004-0313

CVE-2004-0313 describes a critical buffer overflow vulnerability in PSOProxy version 0.91, affecting both the proxy and server components. This flaw allows remote unauthenticated attackers to trigger a denial of service or execute arbitrary code by sending a crafted, excessively long HTTP request, specifically targeting GET arguments or method names. With a CVSS score of 10.0, this vulnerability presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, extensive exploit code is publicly available, including multiple Metasploit modules and ExploitDB entries, indicating a high potential for exploitation, further evidenced by significant community discussion.