CVE-2009-3700

2009-10-2800:00:00

ubuntu.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.092 Low

EPSS

Percentile

94.6%

JSON

Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote
attackers to cause a denial of service (application hang or loss of
blocking functionality) via a long URL with many / (slash) characters,
related to “emergency mode.”

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchsquidguard< 1.2.0-7ubuntu0.1UNKNOWN
ubuntu8.04noarchsquidguard< 1.2.0-8.2ubuntu2.1UNKNOWN
ubuntu9.04noarchsquidguard< 1.2.0-8.4ubuntu1.0.9.04.1UNKNOWN
ubuntu9.10noarchsquidguard< 1.2.0-8.4ubuntu1.0.9.10.1UNKNOWN
ubuntu10.04noarchsquidguard< 1.2.0-8.4ubuntu1.0.10.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	squidguard	< 1.2.0-7ubuntu0.1	UNKNOWN
ubuntu	8.04	noarch	squidguard	< 1.2.0-8.2ubuntu2.1	UNKNOWN
ubuntu	9.04	noarch	squidguard	< 1.2.0-8.4ubuntu1.0.9.04.1	UNKNOWN
ubuntu	9.10	noarch	squidguard	< 1.2.0-8.4ubuntu1.0.9.10.1	UNKNOWN
ubuntu	10.04	noarch	squidguard	< 1.2.0-8.4ubuntu1.0.10.04.1	UNKNOWN