CVE-2011-3626

CVE-2011-3626 affects Logsurfer and Logsurfer+ prior to versions 1.8. The prepare_exec function in src/exec.c contains a double-free vulnerability that allows a remote attacker to execute arbitrary commands via crafted strings in a log file. Connected advisories confirm affected releases: Logsurf...