VDB
DEBIAN-CVE-2011-0343
DEBIAN-CVE-2011-0343
PUBLISHED
Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions (07777), which allows local users to read and write to these log files.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | syslog-ng | 0, 0, 0 |
| Debian:11 | syslog-ng | 0, 0, 0 |
| Debian:12 | syslog-ng | 0, 0, 0 |
| Debian:14 | syslog-ng | 0, 0, 0 |
Timeline
- Jan 28, 2011 CVE Published
- Apr 28, 2026 CVE Updated