Vulnerabilities > Balabit

DATE CVE VULNERABILITY TITLE RISK
2007-12-19 CVE-2007-6437 Improper Input Validation vulnerability in Balabit products
Balabit syslog-ng 2.0.x before 2.0.6 and 2.1.x before 2.1.8 allows remote attackers to cause a denial of service (crash) via a message with a timestamp that does not contain a trailing space, which triggers a NULL pointer dereference.
network
low complexity
balabit CWE-20
5.0
2001-01-09 CVE-2000-1165 Unspecified vulnerability in Balabit Syslog-Ng 1.4.7/1.4.8
Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message that does not have a closing > in the priority specifier.
network
low complexity
balabit
5.0