Joined: 12 May 2004
|Posted: Fri Jan 20, 2012 7:26 pm Post subject: [ GLSA 201201-04 ] Logsurfer: Arbitrary code execution
|Gentoo Linux Security Advisory
Title: Logsurfer: Arbitrary code execution (GLSA 201201-04)
Date: January 20, 2012
A double-free flaw in Logsurfer allows a remote attacker to execute
Logsurfer is a real time log monitoring and analysis tool.
Vulnerable: < 1.8
Unaffected: >= 1.8
Architectures: All supported architectures
Logsurfer log files may contain substrings used for executing external
commands. The prepare_exec() function in src/exec.c contains a
A remote attacker could inject specially-crafted strings into a log file
processed by Logsurfer, resulting in the execution of arbitrary code with
the permissions of the Logsurfer user.
There is no known workaround at this time.
All Logsurfer users should upgrade to the latest version:
|# emerge --sync
# emerge --ask --oneshot --verbose ">=app-admin/logsurfer+-1.8"
Last edited by GLSA on Tue Feb 14, 2012 4:29 am; edited 2 times in total