Back to Database
Status published
Medium
CVE-2011-0343
Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when...
Vulnerability Description
Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions (07777), which allows local users to read and write to these log files.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-0343
Credits & Attribution
No credits recorded in the NVD database.
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608491
- http://www.securityfocus.com/archive/1/515955/100/0/threaded
- https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html
- https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html
- http://www.securityfocus.com/bid/45988
More from oneidentity
View All →CVE-2022-38725
An integer overflow in the RFC3164 parser in One Identity...
Unknown
0
CVE-2020-7962
An issue was discovered in One Identity Password Manager 5.8....
Medium
5.3
CVE-2019-13498
One Identity Cloud Access Manager 8.1.3 does not use HTTP...
High
7.4
CVE-2019-13497
One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows...
Medium
6.5
CVE-2019-13496
One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows...
High
8.1
Affected Vendor
oneidentity
View all reports →Affected Software
syslog-ng
Vulnerable Versions:
2.0, 3.0, 3.1, 3.2
Timeline
Official Publish:
January 28th, 2011
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.