Lucene search
HistoryJan 27, 2012 - 3:55 p.m.
CVE-2011-3626
cve-2011-3626
information security
vulnerability
logsurfer
remote attack
arbitrary commands
7.6 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
83.0%
Double free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and earlier, and Logsurfer+ 1.7 and earlier, allows remote attackers to execute arbitrary commands via crafted strings in a log file.
Related
nessus
nessus
GLSA-201201-04 : Logsurfer: Arbitrary code execution
2012-01-23 00:00:00
gentoo
gentoo
Logsurfer: Arbitrary code execution
2012-01-20 00:00:00
securityvulns
securityvulns
logsurfer double free vulnerability
2012-01-30 00:00:00
[ GLSA 201201-04 ] Logsurfer: Arbitrary code execution
2012-01-30 00:00:00
prion
prion
Double free
2012-01-27 15:55:00
openvas
openvas
Gentoo Security Advisory GLSA 201201-04 (Logsurfer)
2012-02-12 00:00:00
Gentoo Security Advisory GLSA 201201-04 (Logsurfer)
2012-02-12 00:00:00
7.6 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
83.0%
Related for CVE-2011-3626