CVE-2002-2050 | BDVDB-2026-11540 Detail

Description#

Directory traversal vulnerability in processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a .. (dot dot) in the hostname of a log entry.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.iss.net/security_center/static/7848.php
http://jan.kneschke.de/projects/modlogan/download/ChangeLog
http://www.securityfocus.com/bid/3821

Exploit#

No public exploit known

History#

Version 12005-07-14Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.