CVE-2011-3626

Published: Jan 27, 2012Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Double free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and earlier, and Logsurfer+ 1.7 and earlier, allows remote attackers to execute arbitrary commands via crafted strings in a log file.

Affected (16)

Products: Drusus: Logsurfer · Kerry Thompson: Logsurfer+

1 product

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Drusus Logsurfer	version ≤ 1.5b
Drusus Logsurfer	Version 1.1
Drusus Logsurfer	Version 1.2
Drusus Logsurfer	Version 1.3
Drusus Logsurfer	Version 1.41
Drusus Logsurfer	Version 1.4
Drusus Logsurfer	Version 1.5
Drusus Logsurfer	Version 1.5 beta2
Drusus Logsurfer	Version 1.5 beta
Drusus Logsurfer	Version 1.5a

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Kerry Thompson Logsurfer+	version ≤ 1.7
Kerry Thompson Logsurfer+	Version 1.5a
Kerry Thompson Logsurfer+	Version 1.5b
Kerry Thompson Logsurfer+	Version 1.6
Kerry Thompson Logsurfer+	Version 1.6a
Kerry Thompson Logsurfer+	Version 1.6b