ZSA-2007-029: syslog-ng Denial of Service

2007-12-17 Thread Balazs Scheidler
Z o r p S e c u r i t y A d v i s o r y ( Z S A ) PACKAGE : syslog-ng, syslog-ng-premium-edition AFFECTED VERSION: = 2.0.6, 2.1.8 FIXED : 2.0.6, 2.1.8 SUMMARY : Denial of Service TYPE: remote AFFECTED

Re: [syslog-ng] ZSA-2007-029: syslog-ng Denial of Service

2007-12-17 Thread Balazs Scheidler
On Mon, 2007-12-17 at 11:38 +0100, Balazs Scheidler wrote: Z o r p S e c u r i t y A d v i s o r y ( Z S A ) PACKAGE : syslog-ng, syslog-ng-premium-edition AFFECTED VERSION: = 2.0.6, 2.1.8 FIXED : 2.0.6, 2.1.8 Sorry for the mistake

Re: IE SSL Vulnerability

2002-08-10 Thread Balazs Scheidler
On Mon, Aug 05, 2002 at 04:03:29PM -0700, Mike Benham wrote: However, there is a slightly more complicated scenario. Sometimes it is convenient to delegate signing authority to more localized authorities. In this case, the administrator of www.thoughtcrime.org would get a chain of

Re: IE SSL Vulnerability

2002-08-10 Thread Balazs Scheidler
On Thu, Aug 08, 2002 at 01:38:46PM +0200, Balazs Scheidler wrote: On Mon, Aug 05, 2002 at 04:03:29PM -0700, Mike Benham wrote: However, there is a slightly more complicated scenario. Sometimes it is convenient to delegate signing authority to more localized authorities. In this case

Re: DoS with sysklogd, glibc (Caldera)

1999-11-23 Thread Balazs Scheidler
1. Problem Description On Linux, most services do not log informational or error messages to their own files, but use the system log daemon, syslogd, for this. Unfortunately, the current syslogd has a problem by which any user on the local host can mount a denial of service