• info
• discussion
• exploit
• solution
• references

Analog Logfile Script Code Injection Vulnerability

Solution:
The vendor has fixed this issue in version 5.22. Additional upgrades are also available.


Analog Analog 3.9 0beta1

• Analog Analog 5.22
  http://www.analog.cx/download.html

Analog Analog 3.9 0beta2

• Analog Analog 5.22
  http://www.analog.cx/download.html

Analog Analog 4.0 1

• Analog Analog 5.22
  http://www.analog.cx/download.html


• Debian analog_5.22-0potato1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/anal og_5.22-0potato1_alpha.deb


• Debian analog_5.22-0potato1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/analog _5.22-0potato1_arm.deb


• Debian analog_5.22-0potato1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/analo g_5.22-0potato1_i386.deb


• Debian analog_5.22-0potato1_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/analo g_5.22-0potato1_m68k.deb


• Debian analog_5.22-0potato1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/an alog_5.22-0potato1_powerpc.deb


• Debian analog_5.22-0potato1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/anal og_5.22-0potato1_sparc.deb

Analog Analog 4.0 3

• Analog Analog 5.22
  http://www.analog.cx/download.html

Analog Analog 4.0 4

• Analog Analog 5.22
  http://www.analog.cx/download.html

Analog Analog 4.0 2

• Analog Analog 5.22
  http://www.analog.cx/download.html

Analog Analog 4.1

• Analog Analog 5.22
  http://www.analog.cx/download.html

Analog Analog 4.11

• Analog Analog 5.22
  http://www.analog.cx/download.html

Analog Analog 4.14

• Analog Analog 5.22
  http://www.analog.cx/download.html

Analog Analog 4.15

• Analog Analog 5.22
  http://www.analog.cx/download.html

Analog Analog 4.16

• Analog Analog 5.22
  http://www.analog.cx/download.html

Analog Analog 4.9 0beta3

• Analog Analog 5.22
  http://www.analog.cx/download.html

Analog Analog 4.9 1beta1

• Analog Analog 5.22
  http://www.analog.cx/download.html

Analog Analog 4.9 0beta2

• Analog Analog 5.22
  http://www.analog.cx/download.html

Analog Analog 4.9 0beta4

• Analog Analog 5.22
  http://www.analog.cx/download.html

Analog Analog 5.0

• Analog Analog 5.22
  http://www.analog.cx/download.html

Analog Analog 5.0 1

• Analog Analog 5.22
  http://www.analog.cx/download.html

Analog Analog 5.0 3

• Analog Analog 5.22
  http://www.analog.cx/download.html

Analog Analog 5.0 2

• Analog Analog 5.22
  http://www.analog.cx/download.html

Analog Analog 5.1 a

• Analog Analog 5.22
  http://www.analog.cx/download.html

Analog Analog 5.2

• Analog Analog 5.22
  http://www.analog.cx/download.html


• FreeBSD analog-5.22,1.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-4-stable/All/ana log-5.22,1.tgz