FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2009-3826

This CVE name corresponds to:

Entered	Topic
2009-10-22	squidGuard -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2009-3826 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2009-3826
Phase	Assigned(20091028)

Description

Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL.

References

Source	Reference
BUGTRAQ	20091026 squidGuard 1.3 & 1.4 : buffer overflow
CONFIRM	http://www.squidguard.org/Downloads/Patches/1.4/Readme.Patch-20091019
DEBIAN	DSA-2040
SUSE	SUSE-SR:2010:014
BID	36800
OSVDB	59164
SECTRACK	1023079
SECUNIA	37107
SECUNIA	39679
VUPEN	ADV-2009-3013
VUPEN	ADV-2010-1043
XF	squidguard-url-security-bypass(53922)