<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Dennis Rand wrote:
<blockquote
cite="mid:C81131AE0CE8FC48B5B3D1F888FE33A39760D4@maya.csis.local"
type="cite">
<pre wrap="">CSIS Security Group has discovered a remote exploitable arbitrary
overwrite, in the Blue Coat
K9 Web Protection local Web configuration manager on 127.0.0.1 and port
2372.
</pre>
</blockquote>
<font size="3">Justin Seitz of VDA Labs (<a moz-do-not-send="true"
class="moz-txt-link-abbreviated" href="http://www.vdalabs.com">www.vdalabs.com</a>)
already found this bug.
Here's the CVE: </font><span class="296530816-08062007"><font
face="Arial" size="2">CVE-2007-1783.<br>
<br>
</font></span><font size="3"> They had so many bugs, they're rolling
this issue and more into the next release.<br>
<br>
We have a working PoC, and believe it could be transformed into remote
via embedded link. For example:<br>
</font><font size="3"><SCRIPT SRC="<a moz-do-not-send="true"
href="http://127.0.0.1:2372/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA">http://127.0.0.1:2372/<buffer
here></a>"></SCRIPT></font><br>
<font size="3"><br>
Blessings,<br>
Jared</font>
</body>
</html>