Test ID:	1.3.6.1.4.1.25623.1.0.60207
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1464-1)
Summary:	The remote host is missing an update for the Debian 'syslog-ng' package(s) announced via the DSA-1464-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'syslog-ng' package(s) announced via the DSA-1464-1 advisory. Vulnerability Insight: Oriol Carreras discovered that syslog-ng, a next generation logging daemon can be tricked into dereferencing a NULL pointer through malformed timestamps, which can lead to denial of service and the disguise of an subsequent attack, which would otherwise be logged. The old stable distribution (sarge) is not affected. For the stable distribution (etch), this problem has been fixed in version 2.0.0-1etch1. For the unstable distribution (sid), this problem has been fixed in version 2.0.6-1. We recommend that you upgrade your syslog-ng package. Affected Software/OS: 'syslog-ng' package(s) on Debian 4. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-6437 BugTraq ID: 26897 http://www.securityfocus.com/bid/26897 Bugtraq: 20071217 Re: [syslog-ng] ZSA-2007-029: syslog-ng Denial of Service (Google Search) http://www.securityfocus.com/archive/1/485181/100/0/threaded Bugtraq: 20071217 ZSA-2007-029: syslog-ng Denial of Service (Google Search) http://seclists.org/bugtraq/2007/Dec/0202.html Debian Security Information: DSA-1464 (Google Search) http://www.debian.org/security/2008/dsa-1464 https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00606.html https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00610.html http://security.gentoo.org/glsa/glsa-200712-19.xml http://www.osvdb.org/39551 http://securitytracker.com/id?1019105 http://secunia.com/advisories/28118 http://secunia.com/advisories/28279 http://secunia.com/advisories/28372 http://secunia.com/advisories/28483 http://www.vupen.com/english/advisories/2007/4257 XForce ISS Database: syslogng-timestamp-dos(39082) https://exchange.xforce.ibmcloud.com/vulnerabilities/39082
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.