Description
Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow (1) remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and (2) man-in-the-middle attackers to execute arbitrary code via an HTTP response with a long HTTP version field.
References
- 20080731 Secunia Research: Blue Coat K9 Web Protection "Referer" Header Buffer Overflow mailing-list
- http://secunia.com/secunia_research/2007-61/advisory/
- bluecoat-k9-referer-bo(44123) vdb-entry
- 30463 vdb-entry
- 30464 vdb-entry
- 1020587 vdb-entry
- http://secunia.com/secunia_research/2007-64/advisory/
- ADV-2008-2263 vdb-entry
- 1020588 vdb-entry
- 25813 third-party-advisory
- bluecoat-k9-version-bo(44124) vdb-entry
- 20080731 Secunia Research: Blue Coat K9 Web Protection Response Handling Buffer Overflows mailing-list