CVE-2008-7249

EPSS 3.5%

Published: 12/30/2009Modified: 4/28/2026

Also known as:DEBIAN-CVE-2008-7249

Description

Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbitrary code via a long HTTP request method in a crafted access.log file, a different vulnerability than CVE-2008-1167.

Affected packages (1)

Debian/sargfrom 0, < 2.2.4-1

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2008-7249