One Identity syslog-ng 3.2 Open Source Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:oneidentity:syslog-ng:3.2:*:*:*:open_source:*:*:*
part: a version: 3.2 update: *
| Vendor | Oneidentity (9a4d59b1-0090-5ffc-a8b8-0160c7a2dcca) |
|---|---|
| Product | Syslog Ng (6c8faded-7c10-599f-ac54-28c76c28e4fa) |
| Edition | * |
| Language | * |
| Software edition | open_source |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/syslog-ng |
purl2cpe | 2026-06-01 10:11:09.006695 |
pkg:deb/ubuntu/syslog-ng |
purl2cpe | 2026-06-01 10:11:09.006696 |
pkg:github/syslog-ng/syslog-ng |
purl2cpe | 2026-06-01 10:11:09.006697 |
pkg:rpm/fedora/syslog-ng |
purl2cpe | 2026-06-01 10:11:09.006699 |
pkg:rpm/opensuse/syslog-ng |
purl2cpe | 2026-06-01 10:11:09.006700 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-0343 |
vulnerable | 2026-06-08 04:56:36.610520 |
Details available
Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions (07777), which allows local users to read and write to these log files.
Published: 2011-01-28T15:00:00.000Z
Updated: 2024-08-06T21:51:08.491Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.