Blue Coat Systems K9 Web Protection Remote Buffer Overflow Vulnerability

Bugtraq ID:	24373
Class:	Boundary Condition Error
CVE:	CVE-2007-1685
Remote:	Yes
Local:	Yes
Published:	Jun 08 2007 12:00AM
Updated:	May 07 2015 05:37PM
Credit:	CSIS Security Group is credited with the discovery of this issue.
Vulnerable:	Blue Coat Systems K9 Web Protection 3.2.36
Not Vulnerable:	Blue Coat Systems K9 Web Protection 3.2.44

Blue Coat Systems K9 Web Protection Remote Buffer Overflow Vulnerability

K9 Web Protection is prone to a buffer-overflow vulnerability because it fails to perform sufficient boundary checks on user-supplied data before copying it to a buffer.

An attacker could leverage this issue to execute arbitrary code with administrative privileges. A successful exploit could result in the complete compromise of the affected system.

K9 Web Protection 3.2.36 is reported vulnerable; other versions may be affected as well.

Blue Coat Systems K9 Web Protection Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

• /data/vulnerabilities/exploits/k9-poc1.txt
• /data/vulnerabilities/exploits/k9-poc2.pl

Blue Coat Systems K9 Web Protection Remote Buffer Overflow Vulnerability

Solution:
The vendor has released K9 Web Protection 3.2.44 to address this issue.


Blue Coat Systems K9 Web Protection 3.2.36

• Blue Coat Systems K9 Web Protection 3.2.44
  http://www.k9webprotection.com/download.html

Blue Coat Systems K9 Web Protection Remote Buffer Overflow Vulnerability

References:

• Advisory - BlueCoat K9 Web Protection 3.2.36 Overflow (CSIS Security Group)
  
• K9 Web Protection Product Page (Blue Coat Systems)
  
• CSIS Advisory: BlueCoat K9 Web Protection 3.2.36 Overflow (Dennis Rand)