Vulnerability in Modlogan

CVE-2002-2051

The processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a symlink attack on files specified as hostnames in a log file.

EPSS: 0.003 (26.4th percentile) — read the EPSS interpretation.

Affected products

Modlogan — versions 0.5, 0.5.6, 0.5.7
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_XF)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (Patch, x_refsource_MISC)