Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2002-1889

Overview

Vulnerability Score 5.0 5.0
CVE Id CVE-2002-1889
Last Modified 05 Sep 2008 04:31:46
Published 31 Dec 2002 12:00:00
Confidentiality Impact NONE NONE
Integrity Impact NONE NONE
Availability Impact PARTIAL PARTIAL
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2002-1889

Summary

Off-by-one buffer overflow in the context_action function in context.c of Logsurfer 1.41 through 1.5a allows remote attackers to cause a denial of service (crash) via a malformed log entry.

Vulnerable Systems

Application

  • Logsurfer 1.41

  • Logsurfer 1.5

  • Logsurfer 1.5a


References

BID - 5898

XF - logsurfer-contextaction-offbyone-bo(10287)

CONFIRM - ftp://ftp.cert.dfn.de/pub/tools/audit/logsurfer/logsurfer.README.asc


Last Updated: 27 May 2016 10:37:32