CVE-2011-0343

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-01-28 · updated 2026-06-16
Weakness: CWE-264

Description

Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions (07777), which allows local users to read and write to these log files.

Affected products

OneIdentity Syslog-Ng: 2.0, 3.0, 3.1, 3.2

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608491
http://www.securityfocus.com/archive/1/515955/100/0/threaded
http://www.securityfocus.com/bid/45988
https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html
https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608491
http://www.securityfocus.com/archive/1/515955/100/0/threaded
http://www.securityfocus.com/bid/45988
https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html
https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html

Get alerted when CVE-2011-0343 or the next vulnerability affects your stack