Blue Coat K9 Web Protection Multiple Buffer Overflow Vulnerabilities
Description
Multiple vulnerabilities have been identified in Blue Coat K9 Web Protection, which could be exploited by remote attackers to take complete control of an affected system.
The first issue is caused by a buffer overflow error in the filter service (k9filter.exe) when handling an overly long "Referer:" header while accessing the web-based K9 Web Protection Administration interface, which could be exploited by remote attackers to execute arbitrary code by tricking a user into visiting a specially crafted web page.
The second vulnerability is caused by buffer overflow errors in the filter service (k9filter.exe) when handling overly long HTTP version information in responses from a centralised server (sp.cwfservice.net), which could be exploited to execute arbitrary code by intercepting requests via e.g. DNS poisoning or Man-in-the-Middle attacks.
Vulnerable Products
Vulnerable Software: Blue Coat K9 Web Protection version 3.2.44 and prior
