Published: 19/12/2007 Updated: 15/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Balabit syslog-ng 2.0.x prior to 2.0.6 and 2.1.x prior to 2.1.8 allows remote malicious users to cause a denial of service (crash) via a message with a timestamp that does not contain a trailing space, which triggers a NULL pointer dereference.

Vulnerable Product	Search on Vulmon	Subscribe to Product
balabit syslog-ng premium edition
balabit syslog-ng open source edition

Debian Bug report logs - #457334 syslog-ng: CVE-2007-6437 prone to denial of service attack Package: syslog-ng; Maintainer for syslog-ng is syslog-ng maintainers <syslog-ng-maintainers@alioth-listsdebiannet>; Source for syslog-ng is src:syslog-ng (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: ...

Oriol Carreras discovered that syslog-ng, a next generation logging daemon can be tricked into dereferencing a NULL pointer through malformed timestamps, which can lead to denial of service and the disguise of an subsequent attack, which would otherwise be logged The old stable distribution (sarge) is not affected For the stable distribution ...

CWE-20 http://seclists.org/bugtraq/2007/Dec/0202.html http://securitytracker.com/id?1019105 http://secunia.com/advisories/28118 http://security.gentoo.org/glsa/glsa-200712-19.xml http://www.securityfocus.com/bid/26897 http://secunia.com/advisories/28279 http://www.debian.org/security/2008/dsa-1464 http://secunia.com/advisories/28483 https://bugzilla.redhat.com/show_bug.cgi?id=426173 https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00606.html https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00610.html http://secunia.com/advisories/28372 http://www.osvdb.org/39551 http://www.vupen.com/english/advisories/2007/4257 https://exchange.xforce.ibmcloud.com/vulnerabilities/39082 http://www.securityfocus.com/archive/1/485181/100/0/threaded https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=457334 https://nvd.nist.gov https://www.debian.org/security/./dsa-1464

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-6437

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect