Sponsored Content
Special Forums Cybersecurity Security Advisories (RSS) Debian: New syslog-ng packages fix denial of service Post 302158818 by Linux Bot on Wednesday 16th of January 2008 10:30:02 AM
Old 01-16-2008
Debian: New syslog-ng packages fix denial of service

LinuxSecurity.com: Oriol Carreras discovered that syslog-ng, a next generation logging daemon can be tricked into dereferencing a NULL pointer through malformed timestamps, which can lead to denial of service and the disguise of an subsequent attack, which would otherwise be logged.

More...
 
SYSLOG(8)                                                         System Logging                                                         SYSLOG(8)

NAME
syslog-ng, syslogd DESCRIPTION
There are different syslog daemon implementations supported as the system's syslog service, currently syslogd, syslog-ng and rsyslogd The first installed daemon activates itself for the syslog service. Starting with openSUSE-11.2, it is rsyslogd, before it was syslog-ng. But this depends on the software selection during the installation. The name of the daemon used as syslog service is specified in the SYSLOG_DAEMON variable in /etc/sysconfig/syslog. The yast2 sysconfig module provides a comfortable way to switch to another installed daemon and restart the service. The /etc/init.d/syslog init script is able to handle all supported daemons. BUGS
Please report bugs at <http://www.suse.de/feedback> AUTHOR
Juergen Weigert <jw@novell.com> Marius Tomaschewski <mt@novell.com> SEE ALSO
sysklogd(8) syslogd(8) syslog.conf(5) syslog-ng(8) syslog-ng.conf(5) rsyslogd(8) rsyslog.conf(5) syslog May 2008 SYSLOG(8)
All times are GMT -4. The time now is 09:12 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy