Debian Security Advisory DSA 513-1 (log2mail)

The remote host is missing an update to log2mail announced via advisory DSA 513-1. OpenVAS Vulnerability Test $Id: deb5131.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 513-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian DSA-513-1 : log2mail - format string

[email protected] discovered a format string vulnerability in log2mail, whereby a user able to log a specially crafted message to a logfile monitored by log2mail for example, via syslog could cause arbitrary code to be executed with the privileges of the log2mail process. By default, this...