Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by log2mail.
| Software | From | Fixed in |
|---|---|---|
| log2mail / log2mail | 0.2.5.0 | 0.2.5.0.x |
| log2mail / log2mail | 0.2.5.2 | 0.2.5.2.x |
| log2mail / log2mail | 0.2.5.1 | 0.2.5.1.x |
| log2mail / log2mail | 0.2.2.2 | 0.2.2.2.x |