Buffer overflow in Oneidentity Syslog-ng
CVE-2002-1200
Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote atta…
Vulnerability class: Buffer Overflow
EPSS: 0.056 (92.0th percentile) — read the EPSS interpretation.
Affected products
- Oneidentity Syslog-ng — versions 1.4.0, 1.4.7, 1.4.8
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch, Vendor Advisory)
- cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_ENGARDE)
- cve@mitre.org (Third Party Advisory, vdb-entry, x_refsource_XF)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_SUSE)
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA, Broken Link)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Third Party Advisory)
- cve@mitre.org (vendor-advisory, Patch, Third Party Advisory, x_refsource_DEBIAN)