Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of service or execute arbitrary code by seeding manager reports with crafted data. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4051
