PublicDate: 2008-03-05 23:44:00 UTC Candidate: CVE-2008-1167 References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1167 Description: Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header. NOTE: some of these details are obtained from third party information. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_sarg: upstream_sarg: released (2.2.4) dapper_sarg: ignored (reached end-of-life) edgy_sarg: needed (reached end-of-life) feisty_sarg: needed (reached end-of-life) gutsy_sarg: needed (reached end-of-life) hardy_sarg: released (2.2.5-1) intrepid_sarg: released (2.2.5-1) jaunty_sarg: released (2.2.5-1) karmic_sarg: released (2.2.5-1) devel_sarg: released (2.2.5-1)