SARG User-Agent Processing HTML Injection and Stack Buffer Overflow Vulnerabilities

Bugtraq ID:	28077
Class:	Unknown
CVE:	CVE-2008-1167 CVE-2008-1168
Remote:	Yes
Local:	No
Published:	Mar 03 2008 12:00AM
Updated:	Mar 28 2008 02:09PM
Credit:	The vendor reported these issues.
Vulnerable:	SARG SARG 2.2.3.1 S.u.S.E. openSUSE 10.3 S.u.S.E. openSUSE 10.2 S.u.S.E. Linux 10.1 x86-64 S.u.S.E. Linux 10.1 x86 S.u.S.E. Linux 10.1 ppc Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 Mandriva Linux Mandrake 2007.1 x86_64 Mandriva Linux Mandrake 2007.1 Mandriva Linux Mandrake 2007.0 x86_64 Mandriva Linux Mandrake 2007.0 MandrakeSoft Multi Network Firewall 2.0

Not Vulnerable:	SARG SARG 2.2.4