CVE-2007-1685 Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows remote attackers to cause a denial of service (crash) and possibly execute arbit...
HighCVSS 10.0
EPSS 13.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 2372.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bluecoat k9 web protection | = 3.2.36 | No fix listed |
References
- 20070608 Re: CSIS Advisory: BlueCoat K9 Web Protection 3.2.36 Overflow mailing-list
- 20070608 CSIS Advisory: BlueCoat K9 Web Protection 3.2.36 Overflow mailing-list
- 37186 vdb-entry
- 25593 third-party-advisory
- www.csis.dk
- VU#271601 third-party-advisory us-government-resource
- 20070608 CSIS Advisory: BlueCoat K9 Web Protection 3.2.36 Overflow mailing-list
- 24373 vdb-entry
- 1018210 vdb-entry
- ADV-2007-2104 vdb-entry
- bluecoat-management-interface-bo(34773) vdb-entry