Vulnerability in Oneidentity Syslog-ng
CVE-2008-5110
syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the intended jail. NOTE: this is only a vulnerability when a separate vulnerability is present. This flaw affects syslog-ng versions prior to and inc…
EPSS: 0.022 (80.6th percentile) — read the EPSS interpretation.
Affected products
- Oneidentity Syslog-ng
- N/a — versions n/a
References
- secalert@redhat.com (x_refsource_HP, vendor-advisory, Broken Link)
- secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
- secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- secalert@redhat.com (Permissions Required, Third Party Advisory, vdb-entry, x_refsource_VUPEN)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Third Party Advisory, Issue Tracking)