Some security issues have been reported in squidGuard, which can be exploited by malicious people to bypass certain security restrictions.

1) A boundary error in sgLog.c can be exploited to put the application in emergency mode and disable the filter via an overly long URL containing multiple '/' characters.

2) Two errors in the processing of overly long URLs can be exploited to bypass the URL filter.

The security issues are reported in versions 1.3 and 1.4. Prior versions may also be affected.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://www.squidguard.org/Downloads/Patches/1.4/Readme.Patch-20091015
http://www.squidguard.org/Downloads/Patches/1.4/Readme.Patch-20091019

Deep Links
Links available in Customer Area