newsbot
04-03-2008, 01:13 AM
Squid Analysis Report Generator (http://sarg.sourceforge.net) is "a tool that allow you to view "where" your users are going to on the Internet". Execution of arbitrary code in Squid Analysis Report Generator is possible by executing sarg with specially crafted squid log files (access and useragent log).
http://www.securiteam.com/unixfocus/5GP060UNPO.html
http://www.securiteam.com/unixfocus/5GP060UNPO.html