thedark
Second Lieutenant
Joined: 30 Jul 2005
Posts: 1074
|
 Posted: Thu Aug 04, 2005 12:23 am Post subject: Syslog-ng |
 |
|
| Péter Höltzl discovered a problem in the way syslog-ng handles macroexpansion. When a macro is expanded a static length buffer is usedaccompanied by a counter. However, when constant chharacters areappended, the counter is not updated properly, leading to incorrectboundary checking. An attacker may be able to use specially craftedlog messages inserted via UDP which overflows the buffer.This problem has been fixed in version 1.5.15-1.1 for the currentstable distribution (woody), in version 1.4.0rc3-3.2 for the oldstable distribution (potato) and version 1.5.21-1 for the unstabledistribution (sid). |
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
