VDB
CVE-2011-3626
CVE-2011-3626
PUBLISHED
CVSS 7.5 HIGH
Double free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and earlier, and Logsurfer+ 1.7 and earlier, allows remote attackers to execute arbitrary commands via crafted strings in a log file.
EPSS 2.09% · 81.2th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
2.09%
81.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| kerry_thompson | logsurfer\+ | 1.6, 0, 1.5a |
| drusus | logsurfer | 1.41, 1.2, * |
| n/a | n/a | * |
Timeline
- Jan 27, 2012 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 13, 2023 EPSS Score
- May 30, 2023 EPSS Score
- Jul 22, 2023 EPSS Score
- Sep 14, 2023 EPSS Score
References
- [oss-security] 20111017 CVE request: double-free vulnerability in logsurfer mailing-list
- 47725 third-party-advisory
- GLSA-201201-04 vendor-advisory
- http://secunia.com/advisories/46389 advisory
- https://bugs.gentoo.org/show_bug.cgi?id=387397 patch
- http://www.openwall.com/lists/oss-security/2011/10/17/4 technical
- https://nvd.nist.gov/vuln/detail/CVE-2011-3626 advisory