Vulnerabilities

TI-2008-01846 CVE-2008-1922 · GHSA-m2m9-74wm-9cc3

Multiple stack-based buffer overflows in Sarg might allow attackers to execute arbitrary…

MEDIUM 49

Multiple stack-based buffer overflows in Sarg might allow attackers to execute arbitrary code via unknown vectors, probably a crafted Squid log file.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03779 Published 2008-05-13 No fix listed CWE-119

TI-2008-01120 CVE-2008-1168 · GHSA-fmf2-57c4-3g8w

Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg)…

LOW 23

Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header, which is not properly handled when disp…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01553 Published 2008-03-05 No fix listed CWE-79

TI-2008-01119 CVE-2008-1167 · GHSA-w7j3-4592-9f4v

Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis…

MEDIUM 52

Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06736 Published 2008-03-05 No fix listed CWE-119

Vulnerabilities

Filters

Multiple stack-based buffer overflows in Sarg might allow attackers to execute arbitrary…

Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg)…

Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis…