CVE		CVE-2008-1167
Status		Candidate
Description		Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header.  NOTE: some of these details are obtained from third party information.
Phase		Assigned (05.03.2008)
SecurityVulns:		Squid Analysis Report Generator buffer overflow
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1167
References		BUGTRAQ : 20080302 Squid Analysis Report Generator <= 2.2.3.1 buffer overflow
		CONFIRM : http://sourceforge.net/project/shownotes.php?relea...
		FRSIRT : ADV-2008-0749
		SECTRACK : 1019536
		SECUNIA : 28668
		XF : sarg-useragent-bo(40970)