CVE-2011-3200

Related Files

rsyslog Long Tag Off-By-Two Denial of Service

Posted Aug 31, 2024

Authored by H D Moore | Site metasploit.com

This Metasploit module triggers an off-by-two overflow in the rsyslog daemon. This flaw is unlikely to yield code execution but is effective at shutting down a remote log daemon. This bug was introduced in version 4.6.0 and corrected in 4.6.8/5.8.5. Compiler differences may prevent this bug from causing any noticeable result on many systems (RHEL6 is affected).

tags | exploit, remote, overflow, code execution

advisories | CVE-2011-3200

SHA-256 | 1836af5218b01b297dea76f88ecafa1e2a6576adefd69c53dfff4c3fec648662

Download | Favorite | View

Ubuntu Security Notice USN-1224-1

Posted Oct 3, 2011

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1224-1 - It was discovered that rsyslog had an off-by-two error when parsing legacy syslog messages. An attacker could potentially exploit this to cause a denial of service via application crash.

tags | advisory, denial of service

systems | linux, ubuntu

advisories | CVE-2011-3200

SHA-256 | a148d87e10c395bed74c26136c803512ac4ffbb49c4e522a424f33cc1ca2188d

Download | Favorite | View

Mandriva Linux Security Advisory 2011-134-1

Posted Sep 17, 2011

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2011-134 - Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers to cause a denial of service via a long TAG in a legacy syslog message. The updated packages have been patched to correct this issue. rsyslog was upgraded to the 5.8.5 version for Mandriva Linux 2011 that brings additional fixes as well.

tags | advisory, remote, denial of service, overflow

systems | linux, mandriva

advisories | CVE-2011-3200

SHA-256 | 5fb0cbf570f769eb1d92e3de9637a534df3c78e54efc976cdc152978df69fe25

Download | Favorite | View

Mandriva Linux Security Advisory 2011-134

Posted Sep 9, 2011

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2011-134 - Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers to cause a denial of service via a long TAG in a legacy syslog message. The updated packages have been patched to correct this issue.

tags | advisory, remote, denial of service, overflow

systems | linux, mandriva

advisories | CVE-2011-3200

SHA-256 | e2b9a9eebcd2c457f08a472995ec53958f06ca166dcb40494ec1727187937f57

Download | Favorite | View

Red Hat Security Advisory 2011-1247-01

Posted Sep 2, 2011

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2011-1247-01 - The rsyslog packages provide an enhanced, multi-threaded syslog daemon that supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine grained output format control. A two byte buffer overflow flaw was found in the rsyslog daemon's parseLegacySyslogMsg function. An attacker able to submit log messages to rsyslogd could use this flaw to crash the daemon. All rsyslog users should upgrade to these updated packages, which contain a backported patch to correct this issue. After installing this update, the rsyslog daemon will be restarted automatically.

tags | advisory, overflow, tcp

systems | linux, redhat

advisories | CVE-2011-3200

SHA-256 | 32ee5a6363396d220abfb7a2aa15b03178f36efd87ad0d23da3a748135e149dd

Download | Favorite | View