ID:3616 - Exploit for Stack-based buffer overflow in rsyslog - CVE-2011-3200

 
Main Vulnerability Database Exploits ID:3616 - Exploit for Stack-based buffer overflow in rsyslog - CVE-2011-3200

ID:3616 - Exploit for Stack-based buffer overflow in rsyslog - CVE-2011-3200

Published: July 29, 2020


Vulnerability identifier: #VU32854
Vulnerability risk: Medium
CVE-ID: CVE-2011-3200
CWE-ID: CWE-121
Exploitation vector: Remote access
Vulnerable software:
rsyslog

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing a long TAG in a legacy syslog message. A remote unauthenticated attacker can trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Update to version 4.6.8.