CVE-2002-1200

EPSS 6.5%

syslog-ng - buffer overflow

Published: 10/28/2002Modified: 4/28/2026

Also known as:DEBIAN-CVE-2002-1200

Description

Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Affected packages (2)

Debian/syslog-ngfrom 0, < 1.5.21-1
Debian/syslog-ngfrom 0, < 1.5.15-1.1

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2002-1200