Delegate is a niche proxy and gateway platform that maintains a focused but notable presence in specialized infrastructure deployments. The product's vulnerability history centers on improper privilege management within its authentication and access-control mechanisms, reflecting the trust-boundary complexities inherent to intermediary services. Current vulnerability counts, severity distribution, and exploitation activity are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Delegate over time
Signals from CVEs in this vendor scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2004-2003HIGH Buffer overflow in the ssl_prcert function in the SSLway filter (sslway.c) for DeleGate 8.9.2 and earlier allows remote attackers to execute arbitrary code via a certificate with a | May 6, 2004 | 7.5 | 38 | NO | YES |
CVE-2015-7556HIGH DeleGate 9.9.13 allows local users to gain privileges as demonstrated by the dgcpnod setuid program. | Jan 15, 2020 | 7.8 | 32 | NO | YES |
CVE-2001-1202HIGH Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands within a "403 Forbidden" error page, which allows remote attackers to execute arbit | Dec 28, 2001 | 7.5 | 31 | NO | YES |
CVE-2005-0861HIGH Multiple buffer overflows in DeleGate before 8.11.1 may allow attackers to cause a denial of service or execute arbitrary code, possibly due to "overflows on arrays." | May 2, 2005 | 7.5 | 20 | NO | NO |
CVE-2004-0789MEDIUM Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite | Dec 31, 2004 | 5.0 | 20 | NO | NO |
CVE-2002-1781HIGH Multiple buffer overflows in DeleGate 7.7.0 through 7.8.1 allow remote attackers to execute arbitrary code, as demonstrated using a long USER command to the POP proxy. | Dec 31, 2002 | 7.5 | 20 | NO | NO |
CVE-2005-0036MEDIUM The DNS implementation in DeleGate 8.10.2 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect of | Dec 31, 2005 | 5.0 | 19 | NO | NO |
CVE-2006-2072MEDIUM Multiple unspecified vulnerabilities in DeleGate 9.x before 9.0.6 and 8.x before 8.11.6 allow remote attackers to cause a denial of service via crafted DNS responses messages that | Apr 27, 2006 | 5.0 | 16 | NO | NO |
CVE-1999-1338MEDIUM Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions. | Jul 21, 1999 | 5.0 | 15 | NO | NO |
Signals from CVEs in this vendor scope (9 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Delegate.
Media articles that mention a CVE ID that affects a product developed by Delegate — matched by CVE ID, not by vendor name.