← Database

CVE-2008-7249

CRITICAL CVSS: 9.3 Published: 2009-12-30 Modified: 2026-06-16

Description

Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbitrary code via a long HTTP request method in a crafted access.log file, a different vulnerability than CVE-2008-1167.

Affected Platforms

Pedro Lineu Orso Sarg

Weakness Type

CWE-119

References