CVE-2011-0343

Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a…

published January 28, 2011

CVSS
—
EPSS
0%
Percentile
30.5
In the wild
Unconfirmed
What it is

Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions (07777), which allows local users to read and write to these log files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00377 · 30.5th percentile
Published
2011-01-28T15:00Z
EPSS history
Timeline
  • 28 JAN 15:00Z
    Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a…
    cvelistv5