CVE-2002-1200

CVE-2002-1200 describes a buffer overflow vulnerability in Balabit Syslog-NG versions 1.4.x before 1.4.15 and 1.5.x before 1.5.20. This flaw occurs during macro expansion when template filenames or output are used, as the software fails to properly track buffer size when encountering constant characters. The vulnerability has a CVSS score of 7.5, indicating high severity with a network attack vector and low attack complexity. Successful exploitation could lead to a denial of service and potentially arbitrary code execution, impacting confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, nor is exploit code publicly available on platforms like Metasploit or ExploitDB. The vulnerability has also received no community discussion or media coverage, suggesting a low level of public awareness or concern.