PT-2002-2772 · Modlogan · Modlogan

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2051

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ModLogAn versions 0.5.0 through 0.7.11

Description The issue allows local users to overwrite arbitrary files via a symlink attack on files specified as hostnames in a log file when the processor web plugin is used with the splitby option.

Recommendations For ModLogAn versions 0.5.0 through 0.7.11, consider disabling the processor web plugin or the splitby option as a temporary workaround until a patch is available. Restrict access to the log files to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-2051

Produtos afetados

Modlogan

Referências · 5

• http://iss.net/security_center/static/7848.php · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2051 · Nota
• http://jan.kneschke.de/projects/modlogan/download/ChangeLog · Correção
• http://securityfocus.com/bid/3821 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2002-2051 · Nota de Segurança