Executive Summary

Informations
NameCVE-2011-3626First vendor Publication2012-01-27
VendorCveLast vendor Modification2012-01-30

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score7.5Attack RangeNetwork
Cvss Impact Score6.4Attack ComplexityLow
Cvss Expoit Score10AuthentificationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

Double free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and earlier, and Logsurfer+ 1.7 and earlier, allows remote attackers to execute arbitrary commands via crafted strings in a log file.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3626

CWE : Common Weakness Enumeration

idName
CWE-399Resource Management Errors

CPE : Common Platform Enumeration

TypeDescriptionCount
Application10
Application6

Open Source Vulnerability Database (OSVDB)

idDescription
76792Logsurfer src/exec.c prepare_exec() Function Double-free Remote Code Execution

Internal Sources (Detail)

SourceUrl
CONFIRMhttps://bugs.gentoo.org/show_bug.cgi?id=387397
GENTOOhttp://security.gentoo.org/glsa/glsa-201201-04.xml
MLISThttp://www.openwall.com/lists/oss-security/2011/10/17/2
http://www.openwall.com/lists/oss-security/2011/10/17/4
SECUNIAhttp://secunia.com/advisories/46389
http://secunia.com/advisories/47725

Alert History

If you want to see full details history, please login or register.
0
DateInformations
2013-05-10 23:07:57
  • Multiple Updates