syslog-ng weak permissions

On some platforms syslog files are created with 07777 permissions...

CVE-2009-5037

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allow remote attackers to cause a denial of service ASDM syslog outage via a long URL, aka Bug IDs CSCsm11264 and CSCtb92911...

CVE-2009-5037

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allow remote attackers to cause a denial of service ASDM syslog outage via a long URL, aka Bug IDs CSCsm11264 and CSCtb92911...

PT-2011-1308 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions prior to 8.23 Description: The issue allows remote attackers to cause a denial of service, specifically an ASDM syslog outage, by sending a long URL. Recommendations: For...

CVE-2009-5037: Undefined Security Weakness

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allow remote attackers to cause a denial of service ASDM syslog outage via a long URL, aka Bug IDs CSCsm11264 and CSCtb92911...

ManageEngine EventLog Analyzer vulnerabilities

Crossite scripting, syslog DoS...

ManageEngine EventLog Analyzer Syslog Remote Denial of Service Vulnerability

Title: ManageEngine EventLog Analyzer Syslog Remote Denial of Service Vulnerability Risk CVSS2 Base Score: High 7.8 Solutionary ID: SERT-VDN-1000 CVE ID: Pending Solutionary Disclosure URL:...

Mandriva Update for ocsinventory-agent MDVA-2010:234 (ocsinventory-agent)

Check for the Version of ocsinventory-agent OpenVAS Vulnerability Test Mandriva Update for ocsinventory-agent MDVA-2010:234 ocsinventory-agent Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Mandriva Update for ocsinventory-agent MDVA-2010:234 (ocsinventory-agent)

Check for the Version of ocsinventory-agent OpenVAS Vulnerability Test Mandriva Update for ocsinventory-agent MDVA-2010:234 ocsinventory-agent Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Cisco IOS Syslog Crash - Cisco Systems

Certain versions of Cisco IOS software may crash or hang when they receive invalid user datagram protocol UDP packets sent to their "syslog" ports port 514. At least one commonly-used Internet scanning tool generates packets which can cause such crashes and hangs. This fact has been announced on...

rpc.pcnfsd - Remote Format String

rpc.pcnfsd - Remote Format String / Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - rpc.pcnfsd syslog format string vulnerability / include include include include include define PCNFSDPROG 150001 define PCNFSDVERS 1 define PCNFSDPRINIT 2 define...

rpc.pcnfsd - Remote Format String

/ Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - rpc.pcnfsd syslog format string vulnerability / include include include include include define PCNFSDPROG 150001 define PCNFSDVERS 1 define PCNFSDPRINIT 2 define PCNFSDPRSTART 3 struct cmsend char s1;...

HP-UX, IBM AIX, SGI IRIX rpc.pcnfsd format string vulnerability

Format string vulnerability on syslog call...

Multiple Vendors rpc.pcnfsd Syslog Format String Remote Code Execution (CVE-2010-1039)

The rpc.pcnfsd daemon handles requests from PC-NFS clients for authentication services on remote machines. These services include authentication for mounting and for print spooling. An integer overflow vulnerability was reported in the rpc.pcnfsd service within the several systems. The...

Berlios GPSD - Format String (Metasploit)

$Id: gpsdformatstring.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

List /var/adm and /lar/log accessrights, read /etc/rsylog.conf an /etc/syslog.conf

List /var/adm and /lar/log accessrights, read /etc/rsylog.conf an /etc/syslog.conf SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

ClamAV Output Log Handling Format String (CVE-2006-1615)

ClamAV AntiVirus is an open source product that provides anti-virus scanning utilities and an anti-virus library. The program implements extensive logging facilities that are used to record significant events either to a separate log file or using the system logging facility. A format string...

Debian DSA-1992-1 : chrony - several vulnerabilities

Several vulnerabilities have been discovered in chrony, a pair of programs which are used to maintain the accuracy of the system clock on a computer. This issues are similar to the NTP security flaw CVE-2009-3563. The Common Vulnerabilities and Exposures project identifies the following problems ...

CVE-2010-0294

chronyd in Chrony before 1.23.1, and possibly 1.24-pre1, generates a syslog message for each unauthorized cmdmon packet, which allows remote attackers to cause a denial of service disk consumption via a large number of invalid packets...

CVE-2010-0294: Undefined Security Weakness

chronyd in Chrony before 1.23.1, and possibly 1.24-pre1, generates a syslog message for each unauthorized cmdmon packet, which allows remote attackers to cause a denial of service disk consumption via a large number of invalid packets...