NetSight
IP …
critical9.3

CVE-2008-7249

Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbitrary code via a lo…

Impact

Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbitrary code via a long HTTP request method in a crafted access.log file, a different vulnerability than CVE-2008-1167.

Affected products

VendorProductAffected versions
Pedro Lineu OrsoSarg
Version 2.2.4

Weakness classification

CWE-119

References