Security Advisory
CVE-2011-3626
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Double free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and earlier, and Logsurfer+ 1.7 and earlier, allows remote attackers to execute arbitrary commands via crafted strings in a log file.