PT-2002-1007 · Log2Mail · Log2Mail

Published 2002-11-12 · Updated 2008-09-05 · CVE-2002-1251

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions log2mail versions prior to 0.2.5.1

Description The issue allows remote attackers to execute arbitrary code via a long log message, potentially leading to disruption of confidentiality, integrity, and availability of protected information. This can be exploited remotely.

Recommendations For versions prior to 0.2.5.1, update to version 0.2.5.1 or later to resolve the issue. As a temporary workaround, consider restricting the length of log messages to prevent buffer overflow until a patch is applied.

Fix

Related Identifiers

BDU:2015-02035

CVE-2002-1251

DSA-186

Affected Products

Log2Mail

References · 7

• http://debian.org/security/2002/dsa-186 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1251 · Security Note
• https://bdu.fstec.ru/vul/2015-02035 · Security Note
• http://iss.net/security_center/static/10527.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1251 · Security Note
• http://debian.org/security/dsa-186 · Note
• http://securityfocus.com/bid/6089 · Note