Sarg

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Sarg records in CISA KEV

No Sarg vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Squid Analysis Report Generator 3 records MEDIUM

Records

3 records in Squid Analysis Report Generator · all components

TI-2008-01119 CVE-2008-1167 · GHSA-w7j3-4592-9f4v

Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis…

MEDIUM 52

Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06736 Published 2008-03-05 No fix listed CWE-119

TI-2008-01846 CVE-2008-1922 · GHSA-m2m9-74wm-9cc3

Multiple stack-based buffer overflows in Sarg might allow attackers to execute arbitrary…

MEDIUM 49

Multiple stack-based buffer overflows in Sarg might allow attackers to execute arbitrary code via unknown vectors, probably a crafted Squid log file.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03779 Published 2008-05-13 No fix listed CWE-119

TI-2008-01120 CVE-2008-1168 · GHSA-fmf2-57c4-3g8w

Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg)…

LOW 23

Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header, which is not properly handled when disp…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01553 Published 2008-03-05 No fix listed CWE-79

Open these records in search →

Critical	2
High	0
Medium	1
Low	0
No CVSS	0