CVE-2004-1120: Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network pr...

Security readout for executives and security teams

CVE-2004-1120 affects the legacy ProZilla download client. A malicious or compromised remote server could send an overly long redirect Location header and potentially run code on the user's machine. This is most relevant where old Linux systems or archived tooling still use ProZilla. Exposure is likely limited to systems that still have ProZilla 1.3.6-r2 or earlier installed or embedded in legacy workflows. Modern environments are less likely affected unless old packages, scripts, or recovery images retain this client. Prioritize remediation if ProZilla appears in production, build infrastructure, or legacy operational images. The business risk is code execution through a network-facing client interaction, but urgency depends on whether this obsolete tool is still present. Mitigation focus: Inventory systems for ProZilla 1.3.6-r2 and earlier.; Remove ProZilla where it is not operationally required.; Check Debian and Gentoo advisories for vendor-supported package guidance..

Prepared

Jun 30, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.