Gentoo 200903-40 Normal: Analog DoS Risk And Resolution

Gentoo Linux Security Advisory GLSA 200903-40 https://security.gentoo.org/ Severity: Normal Title: Analog: Denial of Service Date: March 29, 2009 Bugs: #249140 ID: 200903-40

Synopsis ======= A Denial of Service vulnerability was discovered in Analog.
Background ========= Analog is a a webserver log analyzer.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-admin/analog < 6.0-r2 >= 6.0-r2
========== Diego E. Petteno reported that the Analog package in Gentoo is built with its own copy of bzip2, making it vulnerable to CVE-2008-1372 (GLSA 200804-02).
Impact ===== A local attacker could place specially crafted log files into a log directory being analyzed...