CVE-2009-3826

Related Files

Debian Linux Security Advisory 2040-1

Posted May 3, 2010

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2040-1 - It was discovered that in squidguard, a URL redirector/filter/ACL plugin for squid, several problems in src/sgLog.c and src/sgDiv.c allow remote users to either cause a denial of service or bypass rules.

tags | advisory, remote, denial of service

systems | linux, debian

advisories | CVE-2009-3700, CVE-2009-3826

SHA-256 | 8ecfb2dbcd98bafedd07e970a6b4302b435e74249fd1cad8e348bbd9ccf749ec

Download | Favorite | View

Mandriva Linux Security Advisory 2009-293

Posted Jan 11, 2010

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2009-293 - Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service (application hang or loss of blocking functionality) via a long URL with many / (slash) characters, related to emergency mode. Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL. squidGuard was upgraded to 1.2.1 for MNF2/CS3/CS4 with additional upstream security and bug fixes patches applied. This update fixes these vulnerabilities. Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers.

tags | advisory, remote, denial of service, overflow, vulnerability

systems | linux, mandriva

advisories | CVE-2009-3700, CVE-2009-3826

SHA-256 | 4136321399907bc27e64746ae43e0f3db81f16e01b27c8114f06d8ed2998ba88

Download | Favorite | View

Mandriva Linux Security Advisory 2009-293

Posted Nov 3, 2009

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2009-293 - Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service (application hang or loss of blocking functionality) via a long URL with many / (slash) characters, related to emergency mode. Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL. squidGuard was upgraded to 1.2.1 for MNF2/CS3/CS4 with additional upstream security and bug fixes patches applied. This update fixes these vulnerabilities.

tags | advisory, remote, denial of service, overflow, vulnerability

systems | linux, mandriva

advisories | CVE-2009-3700, CVE-2009-3826

SHA-256 | 739b835d96c30bcffa913c64349d4b16321822040ca8acb6f0e82a29ca742ce8

Download | Favorite | View