VulnerabilityModified
CVE-2007-1685
Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 2372.
HIGH 10.0EPSS 13.5%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 13.5%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 2372.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 13.52% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- bluecoat/k9 web protection
- Source
- cret@cert.org
References
- http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0190.html
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063848.html
- http://osvdb.org/37186
- http://secunia.com/advisories/25593
- http://www.csis.dk/dk/forside/Bluecoat-k9.pdf
- http://www.kb.cert.org/vuls/id/271601US Government Resource
- http://www.securityfocus.com/archive/1/470836/100/0/threaded
- http://www.securityfocus.com/bid/24373
- http://www.securitytracker.com/id?1018210
- http://www.vupen.com/english/advisories/2007/2104
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34773
- http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0190.html
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063848.html
- http://osvdb.org/37186
- http://secunia.com/advisories/25593
- http://www.csis.dk/dk/forside/Bluecoat-k9.pdf
- http://www.kb.cert.org/vuls/id/271601US Government Resource
- http://www.securityfocus.com/archive/1/470836/100/0/threaded
- http://www.securityfocus.com/bid/24373
- http://www.securitytracker.com/id?1018210
- http://www.vupen.com/english/advisories/2007/2104
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34773
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.