FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2009-3700

This CVE name corresponds to:

Entered	Topic
2009-10-22	squidGuard -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2009-3700 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2009-3700
Phase	Assigned(20091015)

Description

Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service (application hang or loss of blocking functionality) via a long URL with many / (slash) characters, related to "emergency mode."

References

Source	Reference
BUGTRAQ	20091026 squidGuard 1.3 & 1.4 : buffer overflow
CONFIRM	http://www.squidguard.org/Downloads/Patches/1.4/Readme.Patch-20091015
DEBIAN	DSA-2040
SUSE	SUSE-SR:2010:014
BID	36800
OSVDB	59163
SECTRACK	1023079
SECUNIA	37107
SECUNIA	39679
VUPEN	ADV-2009-3013
VUPEN	ADV-2010-1043
XF	squidguard-sglog-security-bypass(53921)