CVE-2008-7249

CRITICAL 9.3CVE-2008-7249 · Published 30/12/2009 · updated 16/06/2026

In short

CVE-2008-7249 is a CRITICAL (CVSS 9.3) vulnerability affecting sarg (pedro lineu orso).
Chance of exploitation in the next 30 days (EPSS): 4.0%, higher than 90.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sarg pedro_lineu_orso	`= 2.2.4`	No fix yet

Description

Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbitrary code via a long HTTP request method in a crafted access.log file, a different vulnerability than CVE-2008-1167.

References

sourceforge.net/project/shownotes.php · Patch
securityfocus.com/archive/1/489018/100/0/threaded
vupen.com/english/advisories/2008/0749 · Patch

More vulnerabilities in sarg

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free