Signature Detail
Short Name |
HTTP:MISC:BLUECOAT-K9-BO |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Blue Coat Systems K9 Web Protection Remote Buffer Overflow |
Release Date |
2012/11/30 |
Update Number |
2207 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Blue Coat Systems K9 Web Protection Remote Buffer Overflow
This signature detects attempts to exploit a known vulnerability in the Blue Coat Systems K9 Web Protection versions prior to 3.2.44. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected application.
Extended Description
K9 Web Protection is prone to a buffer-overflow vulnerability because it fails to perform sufficient boundary checks on user-supplied data before copying it to a buffer. An attacker could leverage this issue to execute arbitrary code with administrative privileges. A successful exploit could result in the complete compromise of the affected system. K9 Web Protection 3.2.36 is reported vulnerable; other versions may be affected as well.
Affected Products
- Blue Coat Systems K9 Web Protection 3.2.36
References
- BugTraq: 24373
- CVE: CVE-2007-1685