CVE-2008-5110

CVE-2008-5110 describes a vulnerability in syslog-ng versions prior to and including 2.0.9, where the software fails to call chdir after chroot, potentially allowing an attacker to escape the intended chroot jail. This flaw, however, is only exploitable when combined with another vulnerability. With a CVSS score of 9.3 (Critical), it indicates a high potential for complete compromise of confidentiality, integrity, and availability, requiring medium attack complexity and no authentication. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.