CVE - CVE-2009-3826

CVE-ID
CVE-2009-3826	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20091026 squidGuard 1.3 & 1.4 : buffer overflow URL:http://www.securityfocus.com/archive/1/507440/100/0/threaded CONFIRM:http://www.squidguard.org/Downloads/Patches/1.4/Readme.Patch-20091019 DEBIAN:DSA-2040 URL:http://www.debian.org/security/2010/dsa-2040 SUSE:SUSE-SR:2010:014 URL:http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html BID:36800 URL:http://www.securityfocus.com/bid/36800 OSVDB:59164 URL:http://www.osvdb.org/59164 SECTRACK:1023079 URL:http://securitytracker.com/id?1023079 SECUNIA:37107 URL:http://secunia.com/advisories/37107 SECUNIA:39679 URL:http://secunia.com/advisories/39679 VUPEN:ADV-2009-3013 URL:http://www.vupen.com/english/advisories/2009/3013 VUPEN:ADV-2010-1043 URL:http://www.vupen.com/english/advisories/2010/1043 XF:squidguard-url-security-bypass(53922) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/53922
Assigning CNA
N/A
Date Entry Created
20091028	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20091028)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org