Unrated severityNVD Advisory· Published Mar 5, 2008· Updated Apr 23, 2026
CVE-2008-1167
CVE-2008-1167
Description
Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header. NOTE: some of these details are obtained from third party information.
Affected products
1- cpe:2.3:a:sarg:squid_analysis_report_generator:2.2.3.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
13- secunia.com/advisories/28668nvdVendor Advisory
- secunia.com/advisories/29309nvdVendor Advisory
- secunia.com/advisories/29323nvdVendor Advisory
- secunia.com/advisories/29500nvdVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.htmlnvd
- sourceforge.net/project/shownotes.phpnvd
- www.gentoo.org/security/en/glsa/glsa-200803-21.xmlnvd
- www.mandriva.com/security/advisoriesnvd
- www.securityfocus.com/archive/1/489018/100/0/threadednvd
- www.securityfocus.com/bid/28077nvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2008/0749nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/40970nvd
News mentions
0No linked articles in our index yet.