Gentoo Security Advisory GLSA 201201-04 (Logsurfer)

The remote host is missing updates announced in advisory GLSA 201201-04. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

[ GLSA 201201-04 ] Logsurfer: Arbitrary code execution

Gentoo Linux Security Advisory GLSA 201201-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2011-3626

CVE-2011-3626 affects Logsurfer and Logsurfer+ prior to versions 1.8. The prepare_exec function in src/exec.c contains a double-free vulnerability that allows a remote attacker to execute arbitrary commands via crafted strings in a log file. Connected advisories confirm affected releases: Logsurf...