CVE-2008-1167 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-1167
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-1167

Description: Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header. NOTE: some of these details are obtained from third party information.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/40970 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html ST 1019536 SAID Secunia Advisory: SA28668 Secunia Advisory: SA29309 Secunia Advisory: SA29323 Secunia Advisory: SA29500 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:079 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200803-21.xml CONFIRM http://sourceforge.net/project/shownotes.php?release_id=581212 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/489018/100/0/threaded BID 28077

Return to the previous page.