CVE-2002-2051

The CVE-2002-2051 entry concerns the processor_web plugin for ModLogAn (versions 0.5.0 through 0.7.11) when used with the splitby option. The vulnerability arises from a symlink-based attack targeting files specified as hostnames in a log file, allowing local attackers to overwrite arbitrary file...