[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20111017100738.GC11883@suse.de>
Date: Mon, 17 Oct 2011 12:07:38 +0200
From: Marcus Meissner <meissner@...e.de>
To: oss-security@...ts.openwall.com
Subject: Re: CVE request: double-free vulnerability in logsurfer
On Mon, Oct 17, 2011 at 12:02:29PM +0200, Timo Warns wrote:
> Gregor Kopf of Recurity Labs GmbH found a double-free vulnerability in
> Logsurfer affecting the function prepare_exec(). The vulnerability is caused by
> an insufficient treatment of an error condition that is returned by the
> function get_word() when it is unable to correctly parse its input.
>
> The following versions of logsurfer are affected:
>
> Logsurfer 1.5b and previous versions
> Logsurfer+ 1.7 and previous versions
>
> A patch is available at http://logsurfer.git.sourceforge.net/git/gitweb.cgi?p=logsurfer/logsurfer;a=commit;h=07983748da9ea3d4954b80f02fed692fe21b1134
How can this be exploited?
It seems to happen in the argument handling and I doubt an attacker can inject arguments?
Ciao, Marcus
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
