CVE-2009-1476: Buffer overflow in lib/load_http.c in ippool in Darren Reed IPFilter (aka IP Filter) 4.1.31 allows local us...

Security readout for executives and security teams

This is an old local privilege-escalation flaw in IPFilter's ippool utility. A user who already has local access could use an overly long hostname in a URL to trigger a buffer overflow and potentially gain higher privileges. It is not described as a remote internet attack in the provided sources. Exposure is most likely on legacy Unix-like systems or appliances running IPFilter 4.1.31 with ippool available to local users. The provided affected-product metadata is incomplete, so inventory validation is required before assuming exposure or non-exposure. Treat this as a targeted legacy-system risk. It is less urgent than a remotely exploitable internet-facing flaw, but it matters on shared servers, admin jump hosts, and older network appliances where local access exists. Mitigation focus: Inventory systems and appliances for IPFilter or ippool version 4.1.31.; Check vendor or distribution advisories for corrected IPFilter packages.; Apply updates that incorporate the corrected load_http.c behavior, where available..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.