RSS   Vulnerabilities for 'Syslog-ng'   RSS

2011-07-11
 
CVE-2011-1951

CWE-399
 
 
lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly other versions, allows remote attackers to cause a denial of service (memory consumption) via a message that does not match a regular expression.

 
2011-01-28
 
CVE-2011-0343

CWE-264
 
 
Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions (07777), which allows local users to read and write to these log files.

 
2008-11-17
 
CVE-2008-5110

CWE-noinfo
 
 
syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the intended jail. NOTE: this is only a vulnerability when a separate vulnerability is present.

 
2002-10-28
 
CVE-2002-1200

 
 
Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.

 
2001-01-09
 
CVE-2000-1165

 
 
Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message that does not have a closing > in the priority specifier.

 

 >>> Vendor: Balabit 3 Products
Syslog-ng
Syslog-ng open source edition
Syslog-ng premium edition

Copyright 2024, cxsecurity.com

 

Back to Top