Vulnerabilities > Oneidentity
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2008-11-17 | CVE-2008-5110 | Unspecified vulnerability in Oneidentity Syslog-Ng syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the intended jail. | 9.3 |
| 2002-10-28 | CVE-2002-1200 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Oneidentity Syslog-Ng Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote attackers to cause a denial of service and possibly execute arbitrary code. | 7.5 |