CVE-2011-0343

Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions 07777, which allows local users to read and write to these log files...

CVE-2011-0343

CVE-2011-0343 affects Balabit syslog-ng versions 2.0, 3.0, 3.1, and 3.2 (OSE and PE) when running on FreeBSD or HP-UX . The root cause is improper cast operations that cause syslog-ng to use a default value of -1 to name log files, resulting in insecure permissions (07777) and enabling local user...

CVE-2011-0343

Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions 07777, which allows local users to read and write to these log files...

syslog-ng wrong file permission vulnerability

========================================================================== syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE = Information leak, access prevention and possible priviledge escalation CVE-2011-0343 ========================================================================== 1. OVERVIEW Versions...

syslog-ng weak permissions

On some platforms syslog files are created with 07777 permissions...

CVE-2009-5037

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allow remote attackers to cause a denial of service ASDM syslog outage via a long URL, aka Bug IDs CSCsm11264 and CSCtb92911...

CVE-2009-5037

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allow remote attackers to cause a denial of service ASDM syslog outage via a long URL, aka Bug IDs CSCsm11264 and CSCtb92911...

PT-2011-1308 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions prior to 8.23 Description: The issue allows remote attackers to cause a denial of service, specifically an ASDM syslog outage, by sending a long URL. Recommendations: For...

ManageEngine EventLog Analyzer vulnerabilities

Crossite scripting, syslog DoS...

ManageEngine EventLog Analyzer Syslog Remote Denial of Service Vulnerability

Title: ManageEngine EventLog Analyzer Syslog Remote Denial of Service Vulnerability Risk CVSS2 Base Score: High 7.8 Solutionary ID: SERT-VDN-1000 CVE ID: Pending Solutionary Disclosure URL:...

Mandriva Update for ocsinventory-agent MDVA-2010:234 (ocsinventory-agent)

Check for the Version of ocsinventory-agent OpenVAS Vulnerability Test Mandriva Update for ocsinventory-agent MDVA-2010:234 ocsinventory-agent Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Mandriva Update for ocsinventory-agent MDVA-2010:234 (ocsinventory-agent)

Check for the Version of ocsinventory-agent OpenVAS Vulnerability Test Mandriva Update for ocsinventory-agent MDVA-2010:234 ocsinventory-agent Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Cisco IOS Syslog Crash - Cisco Systems

Certain versions of Cisco IOS software may crash or hang when they receive invalid user datagram protocol UDP packets sent to their "syslog" ports port 514. At least one commonly-used Internet scanning tool generates packets which can cause such crashes and hangs. This fact has been announced on...

rpc.pcnfsd - Remote Format String

/ Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - rpc.pcnfsd syslog format string vulnerability / include include include include include define PCNFSDPROG 150001 define PCNFSDVERS 1 define PCNFSDPRINIT 2 define PCNFSDPRSTART 3 struct cmsend char s1;...

rpc.pcnfsd - Remote Format String

rpc.pcnfsd - Remote Format String / Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - rpc.pcnfsd syslog format string vulnerability / include include include include include define PCNFSDPROG 150001 define PCNFSDVERS 1 define PCNFSDPRINIT 2 define...

HP-UX, IBM AIX, SGI IRIX rpc.pcnfsd format string vulnerability

Format string vulnerability on syslog call...

Multiple Vendors rpc.pcnfsd Syslog Format String Remote Code Execution (CVE-2010-1039)

The rpc.pcnfsd daemon handles requests from PC-NFS clients for authentication services on remote machines. These services include authentication for mounting and for print spooling. An integer overflow vulnerability was reported in the rpc.pcnfsd service within the several systems. The...

Berlios GPSD - Format String (Metasploit)

$Id: gpsdformatstring.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

List /var/adm and /lar/log accessrights, read /etc/rsylog.conf an /etc/syslog.conf

List /var/adm and /lar/log accessrights, read /etc/rsylog.conf an /etc/syslog.conf SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

ClamAV Output Log Handling Format String (CVE-2006-1615)

ClamAV AntiVirus is an open source product that provides anti-virus scanning utilities and an anti-virus library. The program implements extensive logging facilities that are used to record significant events either to a separate log file or using the system logging facility. A format string...