Lucene search

[email protected]CVE-2000-1165

HistoryJan 09, 2001 - 5:00 a.m.

CVE-2000-1165

2001-01-0905:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2000-1165

balabit

syslog-ng

denial of service

priority specifier

nvd

7.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.01 Low

EPSS

Percentile

83.6%

JSON

Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message that does not have a closing > in the priority specifier.

CPENameOperatorVersion
balabit:syslog-ngbalabit syslog-ngle1.4.6
balabit:syslog-ngbalabit syslog-ngeq1.4.8
balabit:syslog-ngbalabit syslog-ngeq1.4.7

CPE	Name	Operator	Version
balabit:syslog-ng	balabit syslog-ng	le	1.4.6
balabit:syslog-ng	balabit syslog-ng	eq	1.4.8
balabit:syslog-ng	balabit syslog-ng	eq	1.4.7

References

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:02.syslog-ng.asc

archives.neohapsis.com/archives/bugtraq/2000-11/0300.html

www.balabit.hu/products/syslog-ng/

www.securityfocus.com/bid/1981

exchange.xforce.ibmcloud.com/vulnerabilities/5576

7.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.01 Low

EPSS

Percentile

83.6%

JSON