Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1 and probably later allows user-assisted remote attackers to execute arbitrary code via a long HTTP request method in a crafted access.log file a different vulnerability than CVE-2008-1167.