1115 matches found
CVE-2008-5617
CVE-2008-5617 targets rsyslog ACL handling (versions 3.12.1–3.20.0, 4.1.0, 4.1.1) where the $AllowedSender directive is ignored, allowing remote spoofing of log messages and potential flood (high severity, network attack). Connected sources confirm exploitation potential and vendor advisories cit...
CVE-2008-5618
imudp in rsyslog 4.x before 4.1.2, 3.21 before 3.21.9 beta, and 3.20 before 3.20.2 generates a message even when it is sent by an unauthorized sender, which allows remote attackers to cause a denial of service disk consumption via a large number of spurious messages...
CVE-2008-5617
The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender directive, which allows remote attackers to bypass intended access restrictions and spoof log messages or create a large number of spurious messages...
CVE-2008-5618
CVE-2008-5618 affects rsyslog: imudp accepts messages from unauthorized senders in rsyslog 4.x before 4.1.2, 3.21 before 3.21.9 beta, and 3.20 before 3.20.2, enabling remote attackers to trigger denial of service via a flood of spurious messages (disk consumption). The connected SUSE/ Fedora docu...
CVE-2008-5618
imudp in rsyslog 4.x before 4.1.2, 3.21 before 3.21.9 beta, and 3.20 before 3.20.2 generates a message even when it is sent by an unauthorized sender, which allows remote attackers to cause a denial of service disk consumption via a large number of spurious messages...
CVE-2008-5617
The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender directive, which allows remote attackers to bypass intended access restrictions and spoof log messages or create a large number of spurious messages...
CVE-2008-5617: Undefined Security Weakness
The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender directive, which allows remote attackers to bypass intended access restrictions and spoof log messages or create a large number of spurious messages...
CVE-2008-5618: Undefined Security Weakness
imudp in rsyslog 4.x before 4.1.2, 3.21 before 3.21.9 beta, and 3.20 before 3.20.2 generates a message even when it is sent by an unauthorized sender, which allows remote attackers to cause a denial of service disk consumption via a large number of spurious messages...
Fedora 9 : rkhunter-1.3.2-5.fc9 (2008-8314)
Wed Sep 3 2008 Kevin Fenzi - 1.3.2-5 - Patch debug tmp file issue - bug 460628 - Mon Jun 16 2008 Kevin Fenzi - 1.3.2-4 - Fix cron script to only mail on warn/error - bug 450703 - Fix conditional to account for fc10 rsyslog - Mon Apr 28 2008 Kevin Fenzi - 1.3.2-3 - Change cron to run after prelink...
Fedora 8 : rkhunter-1.3.2-5.fc8 (2008-8364)
Wed Sep 3 2008 Kevin Fenzi - 1.3.2-5 - Patch debug tmp file issue - bug 460628 - Mon Jun 16 2008 Kevin Fenzi - 1.3.2-4 - Fix cron script to only mail on warn/error - bug 450703 - Fix conditional to account for fc10 rsyslog Note that Tenable Network Security has extracted the preceding description...
CVE-2005-3074
The CVE-2005-3074 issue affects rsyslogd in RSyslog, where a SQL injection flaw in the syslog message handling allows remote attackers to execute arbitrary SQL commands. The vulnerability is present in RSyslog versions before 1.0.1 and before 1.10.1. Root cause: improper handling of crafted syslo...
RSyslog SQL injection
SQL injection on syslog message...
[SA16947] RSyslog Syslog Message SQL Injection Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2005-3074: Undefined Security Weakness
SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute arbitrary SQL commands via crafted syslog messages...