Secunia

A vulnerability has been reported in WinSyslog, which can be exploited by malicious people to cause a DoS (Denial of Service) on a vulnerable syslog server.

The vulnerability is caused due to an error when the interactive syslog server receives and displays syslog events. This can be exploited by sending UDP datagrams containing arbitrary, overly large amounts of data to the interactive server (default port 10514/udp), which will cause it to freeze and halt the OS.

The vulnerability has been reported in version 4.21 SP1. However, other versions may also be affected.

Solution
Update to version 5.0 final or apply hotfix.
Further details available in Customer Area

Provided and/or discovered by
STORM

Changelog
Further details available in Customer Area

Original Advisory
Potential DoS in Interactive Syslog Server:
http://www.adiscon.com/Common/en/advisory/2003-09-15.asp

Deep Links
Links available in Customer Area