Vulnerability in Modlogan

CVE-2002-2050

Directory traversal vulnerability in processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a .. (dot dot) in the hostname of a log entry.

EPSS: 0.005 (37.8th percentile) — read the EPSS interpretation.

Affected products

Modlogan — versions 0.5, 0.5.6, 0.5.7
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_CONFIRM, Patch)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID)