PT-2002-2772 · Modlogan · Modlogan

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2051

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ModLogAn versions 0.5.0 through 0.7.11

Description The issue allows local users to overwrite arbitrary files via a symlink attack on files specified as hostnames in a log file when the processor web plugin is used with the splitby option.

Recommendations For ModLogAn versions 0.5.0 through 0.7.11, consider disabling the processor web plugin or the splitby option as a temporary workaround until a patch is available. Restrict access to the log files to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-2051

Affected Products

Modlogan

References · 5

• http://iss.net/security_center/static/7848.php · Patch
• http://jan.kneschke.de/projects/modlogan/download/ChangeLog · Patch
• http://securityfocus.com/bid/3821 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2002-2051 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2051 · Note