CVE-2002-1200: Buffer Overflow
Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1200?
CVE-2002-1200 has a severity rating that indicates it can lead to denial of service and potential remote code execution.
How do I fix CVE-2002-1200?
To fix CVE-2002-1200, you should upgrade to Syslog-NG version 1.4.15 or 1.5.20 or later.
What versions are affected by CVE-2002-1200?
CVE-2002-1200 affects Balabit Syslog-NG versions prior to 1.4.15 and 1.5.20.
What type of vulnerability is CVE-2002-1200?
CVE-2002-1200 is a vulnerability that can cause denial of service due to improper buffer size tracking.
Can CVE-2002-1200 be exploited remotely?
Yes, CVE-2002-1200 can be exploited remotely by attackers to cause service disruption.