CVE-2011-0343
Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not...
CVE-2011-0343 is a medium vulnerability (CVSS 6.9) in Oneidentity Syslog-ng, published January 28, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in syslog-ng 3.1.3-2.
- Severity
- 6.9 MediumCVSS 2.0, NVD
- Exploit chance
- 0.38%EPSS, 32nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
3.1.3-2syslog-ng +2 more
Description
Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions (07777), which allows local users to read and write to these log files.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions (07777), which allows local users to read and write to these log files.
- Record
CVE-2011-0343- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions (07777), which allows local users to read and write to these log files.
- Record
CVE-2011-0343- Updated
- 2026-11-02
EUVDEUVD-2011-0369No score
Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions (07777), which allows local users to read and write to these log files.
- Record
EUVD-2011-0369- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mw34-97q8-x4qhNo score
Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not...
Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions (07777), which allows local users to read and write to these log files.
- Record
GHSA-mw34-97q8-x4qh- Updated
- 2026-11-02
OSVNo score
Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions (07777), which allows local users to read and write to these log files.
- Record
CVE-2011-0343- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-0343No score
Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions (07777), which allows local users to read and write to these log files.
- Record
DEBIAN-CVE-2011-0343- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10493-1No score
syslog-ng-3.8.1-2.2 on GA media
These are all security issues fixed in the syslog-ng-3.8.1-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10493-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=608491
securityfocus.com/archive/1/515955/100/0/threaded
lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html
nvd.nist.gov/vuln/detail/CVE-2011-0343