<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: k9 web protection</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2008-4515: Blue Coat K9 Web Protection 4.0.230 Beta relies on client-side JavaScript as a protection mechanism, which all</title><link>https://patchthecve.com/cve/CVE-2008-4515.html</link><guid>https://patchthecve.com/cve/CVE-2008-4515.html</guid><pubDate>Tue, 16 Jun 2026 22:57:58 +0000</pubDate><description>HIGH 7.5: Blue Coat K9 Web Protection 4.0.230 Beta relies on client-side JavaScript as a protection mechanism, which allows remote attackers to bypass authentication and access the (1) summary, (2) detail, (3) overrides, and (4) pwemail pages by disabling JavaScript.</description></item><item><title>CVE-2007-2952: Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9 Web Protection </title><link>https://patchthecve.com/cve/CVE-2007-2952.html</link><guid>https://patchthecve.com/cve/CVE-2007-2952.html</guid><pubDate>Tue, 16 Jun 2026 22:40:46 +0000</pubDate><description>HIGH 9.3: Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow (1) remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and (2) man-in-the-middle atta</description></item><item><title>CVE-2007-1685: Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.4</title><link>https://patchthecve.com/cve/CVE-2007-1685.html</link><guid>https://patchthecve.com/cve/CVE-2007-1685.html</guid><pubDate>Tue, 16 Jun 2026 22:38:06 +0000</pubDate><description>HIGH 10.0: Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 2372.</description></item></channel></rss>