Lucene search

MitreCVE-2005-3704

HistoryDec 01, 2005 - 2:07 a.m.

CVE-2005-3704

2005-12-0102:07:00

mitre

web.nvd.nist.gov

cve-2005-3704

system log server

mac os x

os x server

remote attackers

spoofing

syslog

control characters

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.7

Confidence

High

EPSS

0.03

Percentile

90.9%

JSON

System log server in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to spoof syslog messages in log files by injecting various control characters such as newline (NL).

Affected configurations

Nvd

Node

applemac_os_xMatch10.4

applemac_os_xMatch10.4.1

applemac_os_xMatch10.4.2

applemac_os_xMatch10.4.3

applemac_os_x_serverMatch10.4

applemac_os_x_serverMatch10.4.1

applemac_os_x_serverMatch10.4.2

applemac_os_x_serverMatch10.4.3

VendorProductVersionCPE
applemac_os_x10.4cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*
applemac_os_x10.4.1cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*
applemac_os_x10.4.2cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*
applemac_os_x10.4.3cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*
applemac_os_x_server10.4cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*
applemac_os_x_server10.4.1cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*
applemac_os_x_server10.4.2cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*
applemac_os_x_server10.4.3cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	mac_os_x	10.4	cpe:2.3:o:apple:mac_os_x:10.4:::::::*
apple	mac_os_x	10.4.1	cpe:2.3:o:apple:mac_os_x:10.4.1:::::::*
apple	mac_os_x	10.4.2	cpe:2.3:o:apple:mac_os_x:10.4.2:::::::*
apple	mac_os_x	10.4.3	cpe:2.3:o:apple:mac_os_x:10.4.3:::::::*
apple	mac_os_x_server	10.4	cpe:2.3:o:apple:mac_os_x_server:10.4:::::::*
apple	mac_os_x_server	10.4.1	cpe:2.3:o:apple:mac_os_x_server:10.4.1:::::::*
apple	mac_os_x_server	10.4.2	cpe:2.3:o:apple:mac_os_x_server:10.4.2:::::::*
apple	mac_os_x_server	10.4.3	cpe:2.3:o:apple:mac_os_x_server:10.4.3:::::::*

References

docs.info.apple.com/article.html?artnum=302847

secunia.com/advisories/17813

securitytracker.com/id?1015293

www.osvdb.org/21277

www.securityfocus.com/bid/15647

www.vupen.com/english/advisories/2005/2659

exchange.xforce.ibmcloud.com/vulnerabilities/23344

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.7

Confidence

High

EPSS

0.03

Percentile

90.9%

JSON

Related for CVE-2005-3704