CVE-2011-3626

Double free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and earlier, and Logsurfer+ 1.7 and earlier, allows remote attackers to execute arbitrary commands via crafted strings in a log file.

• CWE-399

• http://secunia.com/advisories/46389Vendor Advisory
• http://secunia.com/advisories/47725Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201201-04.xmlVendor Advisory
• http://www.openwall.com/lists/oss-security/2011/10/17/2Patch
• http://www.openwall.com/lists/oss-security/2011/10/17/4
• https://bugs.gentoo.org/show_bug.cgi?id=387397Patch, Vendor Advisory
• http://secunia.com/advisories/46389Vendor Advisory
• http://secunia.com/advisories/47725Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201201-04.xmlVendor Advisory
• http://www.openwall.com/lists/oss-security/2011/10/17/2Patch
• http://www.openwall.com/lists/oss-security/2011/10/17/4
• https://bugs.gentoo.org/show_bug.cgi?id=387397Patch, Vendor Advisory

Published

Jan 27, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3620Apache Qpid 0.12 does not properly verify credentials during…
• CVE-2011-3621A reverse proxy issue exists in FluxBB before 1.4.7 when FOR…9.8
• CVE-2011-3622A Cross-Site Scripting (XSS) vulnerability exists in the adm…6.1
• CVE-2011-3623Multiple stack-based buffer overflows in VideoLAN VLC media …
• CVE-2011-3624Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.…5.3
• CVE-2011-3625Stack-based buffer overflow in the sub_read_line_sami functi…
• CVE-2011-3627The bytecode engine in ClamAV before 0.97.3 allows remote at…
• CVE-2011-3628Untrusted search path vulnerability in pam_motd (aka the MOT…
• CVE-2011-3629Joomla! core 1.7.1 allows information disclosure due to weak…7.5
• CVE-2011-3630Hardlink before 0.1.2 suffer from multiple stack-based buffe…8.8
• CVE-2011-3631Hardlink before 0.1.2 has multiple integer overflows leading…8.8
• CVE-2011-3632Hardlink before 0.1.2 operates on full file system objects p…7.1