Debian/syslog-ng: unknown
syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the intended jail. NOTE: this is only a vulnerability when a separate vulnerability is present. This flaw affe
Action: Upgrade syslog-ng to 2.0.9-4.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.9-4.1 | - |
Fixed versions
| 2.0.9-4.1 |
Sources
- osv: DEBIAN-CVE-2008-5110#Debian:13/syslog-ng
- https://security-tracker.debian.org/tracker/CVE-2008-5110
published · modified · JSON