ID de Prueba:	1.3.6.1.4.1.25623.1.0.800965
Categoría:	Buffer overflow
Título:	SquidGuard Multiple Buffer Overflow Vulnerabilities
Resumen:	SquidGuard is prone to multiple Buffer Overflow vulnerabilities.
Descripción:	Summary: SquidGuard is prone to multiple Buffer Overflow vulnerabilities. Vulnerability Insight: - A boundary error occurs in 'sgLog.c' while handling overly long URLs with multiple '/' characters while operating in the emergency mode. - Multiple buffer overflow errors occur in 'sg.h.in' and 'sgDiv.c.in' while processing overly long URLs and can be exploited to bypass the URL filter. Vulnerability Impact: Remote attackers can exploit this issue to bypass the filter security and to cause Denial of Service due to application hang. Affected Software/OS: SquidGuard version 1.3 and 1.4 Solution: Apply the referenced patches. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3826 BugTraq ID: 36800 http://www.securityfocus.com/bid/36800 Bugtraq: 20091026 squidGuard 1.3 & 1.4 : buffer overflow (Google Search) http://www.securityfocus.com/archive/1/507440/100/0/threaded Debian Security Information: DSA-2040 (Google Search) http://www.debian.org/security/2010/dsa-2040 http://www.osvdb.org/59164 http://securitytracker.com/id?1023079 http://secunia.com/advisories/37107 http://secunia.com/advisories/39679 SuSE Security Announcement: SUSE-SR:2010:014 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html http://www.vupen.com/english/advisories/2009/3013 http://www.vupen.com/english/advisories/2010/1043 XForce ISS Database: squidguard-url-security-bypass(53922) https://exchange.xforce.ibmcloud.com/vulnerabilities/53922 Common Vulnerability Exposure (CVE) ID: CVE-2009-3700 http://www.osvdb.org/59163 XForce ISS Database: squidguard-sglog-security-bypass(53921) https://exchange.xforce.ibmcloud.com/vulnerabilities/53921
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.