Secunia Research has discovered a vulnerability in K9 Web Protection, which can be exploited by malicious people to compromise a user’s system. The vulnerability is caused by a boundary error in the filter service (k9filter.exe) during processing of “Referer” headers when the web-based K9 Web Protection Administration interface is accessed. This can be exploited to cause a stack-based buffer overflow via an overly long “Referer:” header. Successful exploitation allows execution of arbitrary code when a user e.g. visits a malicious web site. Affected is Blue Coat K9 Web Protection 3.2.44 with Filter version 3.2.32.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/68677/secunia-bluecoatref.txt
Source: https://packetstormsecurity.com/files/68677/secunia-bluecoatref.txt.html