CSIS Security Group has reported a vulnerability in BlueCoat K9 Web Protection, which can be exploited by malicious, local users to gain escalated privileges or by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the web-based management service (k9filter.exe) when processing URLs. This can be exploited to cause a buffer overflow via an overly long HTTP request to localhost port 2372.

Successful exploitation may allow execution of arbitrary code with SYSTEM privileges. However, a remote attack requires that a user e.g. is tricked into visiting a malicious website or otherwise follow a specially crafted link.

Solution
Update to version 3.2.44 or later.
Further details available in Customer Area

Provided and/or discovered by
Dennis Rand, CSIS Security Group.

Original Advisory
CSIS Security Group:
http://www.csis.dk/dk/forside/Bluecoat-k9.pdf

Deep Links
Links available in Customer Area