Vulnerability in Drusus Logsurfer
CVE-2011-3626
Double free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and earlier, and Logsurfer+ 1.7 and earlier, allows remote attackers to execute arbitrary commands via crafted strings in a log file.
EPSS: 0.022 (80.5th percentile) — read the EPSS interpretation.
Affected products
- Drusus Logsurfer — versions 1.1, 1.2, 1.3
- Kerry_thompson Logsurfer\+ — versions 1.5a, 1.5b, 1.6
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch)
- secalert@redhat.com (mailing-list, x_refsource_MLIST)
- secalert@redhat.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- secalert@redhat.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secalert@redhat.com (vendor-advisory, x_refsource_GENTOO, Vendor Advisory)