CVE - CVE-2009-3700

CVE-ID
CVE-2009-3700	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service (application hang or loss of blocking functionality) via a long URL with many / (slash) characters, related to "emergency mode."
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20091026 squidGuard 1.3 & 1.4 : buffer overflow URL:http://www.securityfocus.com/archive/1/507440/100/0/threaded CONFIRM:http://www.squidguard.org/Downloads/Patches/1.4/Readme.Patch-20091015 DEBIAN:DSA-2040 URL:http://www.debian.org/security/2010/dsa-2040 SUSE:SUSE-SR:2010:014 URL:http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html BID:36800 URL:http://www.securityfocus.com/bid/36800 OSVDB:59163 URL:http://www.osvdb.org/59163 SECTRACK:1023079 URL:http://securitytracker.com/id?1023079 SECUNIA:37107 URL:http://secunia.com/advisories/37107 SECUNIA:39679 URL:http://secunia.com/advisories/39679 VUPEN:ADV-2009-3013 URL:http://www.vupen.com/english/advisories/2009/3013 VUPEN:ADV-2010-1043 URL:http://www.vupen.com/english/advisories/2010/1043 XF:squidguard-sglog-security-bypass(53921) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/53921
Assigning CNA
N/A
Date Entry Created
20091015	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20091015)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org