Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.
Link | Tags |
---|---|
http://secunia.com/advisories/22932 | third party advisory vendor advisory |
http://www.vupen.com/english/advisories/2006/0955 | vdb entry vendor advisory |
http://secunia.com/advisories/19241 | third party advisory patch vendor advisory |
http://www.novell.com/linux/security/advisories/2006_26_sr.html | vendor advisory |
http://issues.apache.org/jira/browse/LOG4NET-67 | patch vendor advisory |
http://www.osvdb.org/23905 | vdb entry |
https://exchange.xforce.ibmcloud.com/vulnerabilities/25196 | vdb entry |
http://www.securityfocus.com/bid/17095 | vdb entry |