|
|
| |
| BalaBit IT Security syslog-ng is prone to a denial-of-service vulnerability because it fails to adequately sanitize user-supplied input. |
| |
Credit:
The original article can be found at: http://www.securityfocus.com/bid/47800
The information has been provided by Micah Anderson .
|
| |
Vulnerable Systems:
* Balabit syslog-ng Open Source Edition 3.2.2 and prior
Attackers can leverage this issue to cause denial-of-service conditions.
Versions prior to syslog-ng 3.2.4 are vulnerable.
Vendor Status:
Vendor as issued an updated vulnerability.
Patch Availability:
CVE Information:
CVE-2011-1951
Disclosure Timeline:
Initial Release: May 11 2011
|
|
blog comments powered by
|