CVE-2011-3626: Double free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and earlier, and Log...

Security readout for executives and security teams

This issue affects old Logsurfer and Logsurfer+ deployments. A crafted log entry could trigger a memory error in command-preparation logic and lead to arbitrary command execution. Business risk is highest where the tool processes logs influenced by external users or network services. Exposure is likely limited to legacy systems still running Logsurfer 1.5b or earlier, or Logsurfer+ 1.7 or earlier. Risk increases where logs contain attacker-controlled content and Logsurfer is configured to execute commands from matching log rules. Treat as high priority only if legacy Logsurfer is present. The impact is command execution, but the affected software is old and likely uncommon. Prioritize rapid inventory before broad emergency action. Mitigation focus: Inventory Logsurfer and Logsurfer+ installations and versions.; Check Gentoo GLSA-201201-04 and vendor package guidance for fixed versions.; Upgrade, remove, or replace affected legacy installations where feasible..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.