CVE-2002-1200 Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during ma...
HighCVSS 7.5
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oneidentity syslog-ng | = 1.4.0-rc3 | No fix listed |
| oneidentity syslog-ng | = 1.4.7 | No fix listed |
| oneidentity syslog-ng | = 1.4.8 | No fix listed |
| oneidentity syslog-ng | = 1.4.9 | No fix listed |
| oneidentity syslog-ng | = 1.4.10 | No fix listed |
| oneidentity syslog-ng | = 1.4.15 | No fix listed |
| oneidentity syslog-ng | = 1.5.15 | No fix listed |
| oneidentity syslog-ng | = 1.5.20 | No fix listed |
| debian/syslog-ng(Debian:12) | < 1.5.21-1 | 1.5.21-1 |
| debian/syslog-ng(Debian:13) | < 1.5.21-1 | 1.5.21-1 |
| debian/syslog-ng(Debian:14) | < 1.5.21-1 | 1.5.21-1 |
References
- CLA-2002:547 broken-link vendor-advisory
- 20021010 syslog-ng buffer overflow mailing-list third-party-advisory
- www.balabit.hu exploit patch vendor-advisory
- DSA-175 patch third-party-advisory vendor-advisory
- syslogng-macro-expansion-bo(10339) third-party-advisory vdb-entry
- ESA-20021029-028 third-party-advisory vendor-advisory
- SuSE-SA:2002:039 third-party-advisory vendor-advisory
- 5934 exploit third-party-advisory vdb-entry
- Debian Security Tracker CVE-2002-1200 vendor-advisory