Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

Gentoo: GLSA-201201-04 Normal: Logsurfer Arbitrary Code Execution

gentoo
Calendar Grey January 20, 2012
Scroller Gentoo
CVE-2023-12345 exposes critical vulnerabilities. Immediate patching is recommended per Ubuntu bulletin USN-2023-04.
A double-free flaw in Logsurfer allows a remote attacker to execute arbitrary code.

Summary

Logsurfer log files may contain substrings used for executing external commands. The prepare_exec() function in src/exec.c contains a double-free vulnerability.

Topics%20covered

Topics Covered

security advisory gentoo remote attack arbitrary execution normal severity

Resolution

All Logsurfer users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/logsurfer+-1.8"

References

[ 1 ] CVE-2011-3626 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3626

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201201-04
style>.gentoo_availability{display:block;}

Concerns

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.

Severity: Normal
Title: Logsurfer: Arbitrary code execution
Date: January 20, 2012
Bugs: #387397
ID: 201201-04

Topics%20covered

Topics Covered

security advisory gentoo remote attack arbitrary execution normal severity

Synopsis

A double-free flaw in Logsurfer allows a remote attacker to execute arbitrary code.

Background

Logsurfer is a real time log monitoring and analysis tool.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-admin/logsurfer+ < 1.8 >= 1.8

Impact

===== A remote attacker could inject specially-crafted strings into a log file processed by Logsurfer, resulting in the execution of arbitrary code with the permissions of the Logsurfer user.

Workaround

There is no known workaround at this time.