Lucene search

MitreCVE-2000-1165

HistoryMay 07, 2001 - 4:00 a.m.

CVE-2000-1165

2001-05-0704:00:00

mitre

web.nvd.nist.gov

cve-2000-1165

balabit

syslog-ng

denial of service

priority specifier

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.9

Confidence

High

EPSS

0.01

Percentile

83.9%

JSON

Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message that does not have a closing > in the priority specifier.

Affected configurations

Nvd

Node

balabitsyslog-ngRange≤1.4.6

balabitsyslog-ngMatch1.4.7

balabitsyslog-ngMatch1.4.8

VendorProductVersionCPE
balabitsyslog-ng*cpe:2.3:a:balabit:syslog-ng:*:*:*:*:*:*:*:*
balabitsyslog-ng1.4.7cpe:2.3:a:balabit:syslog-ng:1.4.7:*:*:*:*:*:*:*
balabitsyslog-ng1.4.8cpe:2.3:a:balabit:syslog-ng:1.4.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
balabit	syslog-ng	*	cpe:2.3:a:balabit:syslog-ng::::::::
balabit	syslog-ng	1.4.7	cpe:2.3:a:balabit:syslog-ng:1.4.7:::::::*
balabit	syslog-ng	1.4.8	cpe:2.3:a:balabit:syslog-ng:1.4.8:::::::*

References

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:02.syslog-ng.asc

archives.neohapsis.com/archives/bugtraq/2000-11/0300.html

www.balabit.hu/products/syslog-ng/

www.securityfocus.com/bid/1981

exchange.xforce.ibmcloud.com/vulnerabilities/5576

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.9

Confidence

High

EPSS

0.01

Percentile

83.9%

JSON

Related for CVE-2000-1165