Users login

Create an account »

JOIN XATRIX

Users login

Home » Hacking News » Analog Security Advisory

Analog Security Advisory

by Phiber on February 14th, 2001 Analog, a logfile analysis program, has a buffer overflow bug in all versions of analog released prior to today. A malicious user could use an ALIAS command to construct very long strings which were not checked for length....


This bug is particularly dangerous if the form interface (which allows
unknown users to run the program via a CGI script) has been installed.



This bug was discovered by the program author, and there is no known
exploit. However, users are advised to upgrade to one of the two safe
versions immediately, especially if they have installed the form
interface. The URL is http://www.analog.cx/



Posted by Stehpen Turner on a Bugtraq mailing list.


Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.

Contact

Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »