Searching syslog software vulnerabilities

super 3.11.6 and other versions have a buffer o

super |

super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access.


Format string vulnerability in startprinting()

vulnerability | string | Format |

Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote() call.


Format string vulnerability in Infodrom cfinger

vulnerability | Infodrom | cfingerd | string | Format |

Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function.


Format string vulnerability in Network Solution

vulnerability | Solutions | Rwhoisd | Network | string | Format |

Format string vulnerability in Network Solutions Rwhoisd 1.5.7.2 and earlier, when using syslog, allows remote attackers to corrupt memory and possibly execute arbitrary code via a rwhois request that contains format specifiers.


Format string vulnerability in the permitted fu

libgtop_daemon | vulnerability | permitted | function | libgtop | Format | string | GNOME |

Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12 and earlier allows remote attackers to execute arbitrary code via an argument that contains format specifiers that are passed into the (1) syslog_message and (2) syslog_io_message functions.


Format string vulnerability in newsx NNTP clien

vulnerability | before | client | string | Format | newsx | NNTP |

Format string vulnerability in newsx NNTP client before 1.4.8 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a call to the syslog function.


Buffer overflow in the syslog daemon for Solari

attackers | overflow | through | service | Solaris | syslog | denial | Buffer | allows | daemon | remote | cause |

Buffer overflow in the syslog daemon for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (syslogd crash) and possibly execute arbitrary code via long syslog UDP packets.


Multiple format string vulnerabilities in the l

vulnerabilities | Multiple | function | netzioc | logger | format | string | Tanne |

Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allows remote attackers to execute arbitrary code via format string specifiers in syslog.


Format string vulnerability in the msg function

vulnerability | function | daemon | string | Format | rlpr | msg |

Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in a buffer that can not be resolved, which is provided to the syslog function.


Format string vulnerability in the log function

vulnerability | function | jftpgw | string | Format | log |

Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages.


Multiple format string vulnerabilities in the (

vulnerabilities | Multiple | string | format |

Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog.


Format string vulnerability in misc.c in GNU GN

vulnerability | Format | string | GNATS | miscc | GNU |

Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog.


Format string vulnerability in the log function

vulnerability | function | Format | string | SUS | log |

Format string vulnerability in the log function in SUS 2.0.2, and other versions before 2.0.6, allows local users to execute arbitrary code via format string specifiers in a command line argument that is passed directly to syslog.


The ftp_syslog function in ftpd in SGI IRIX 6.5

ftp_syslog | function | IRIX | ftpd | SGI |

The ftp_syslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, possibly preventing the actions of anonymous users from being logged.


Format string vulnerability in the logmsg funct

vulnerability | specifiers | attackers | arbitrary | function | messages | earlier | execute | syslog | remote | string | logmsg | Format | allows | Pound | svcc | code | via |

Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via format string specifiers in syslog messages.


Format string vulnerability in smtp.c for smtp.

vulnerability | smtpproxy | Format | string | smtpc |

Format string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) client hostname or (2) message-id, which are injected into a syslog message.


Format string vulnerability in the Log_Resolver

vulnerability | Log_Resolver | function | ngIRCd | string | Format | logc |

Format string vulnerability in the Log_Resolver function in log.c for ngIRCd 0.8.2 and earlier, when compiled with IDENT, logging to SYSLOG, and with DEBUG enabled, allows remote attackers to execute arbitrary code.


Format string vulnerability in the ErrorLog fun

vulnerability | Greylisting | function | ErrorLog | Format | daemon | string | cnfc |

Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog.


SQL injection vulnerability in rsyslogd in RSys

vulnerability | injection | rsyslogd | RSyslog | before | SQL |

SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute arbitrary SQL commands via crafted syslog messages.


Format string vulnerability in the CF_syslog fu

vulnerability | CF_syslog | function | launchd | Format | string | Apple | Mac |

Format string vulnerability in the CF_syslog function launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a syslog call in the logging facility, as demonstrated by using a crafted plist file.


Software vulnerabilities results 1 to 20 of 46     
Page: 123►