Description
The processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a symlink attack on files specified as hostnames in a log file.
Metrics
CVSS 2.0 2.1/10
AV:L/AC:L/Au:N/C:N/I:P/A:NAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://jan.kneschke.de/projects/modlogan/download/ChangeLogPatch
- http://www.iss.net/security_center/static/7848.phpPatch
- http://www.securityfocus.com/bid/3821Patch
- http://jan.kneschke.de/projects/modlogan/download/ChangeLogPatch
- http://www.iss.net/security_center/static/7848.phpPatch
- http://www.securityfocus.com/bid/3821Patch
Timeline
- Published
- Dec 31, 2002
- Last modified
- Jun 16, 2026
- NVD status
- Modified