CVE Vulnerabilities

CVE-2005-3074

Published: Sep 27, 2005 | Modified: Sep 05, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute arbitrary SQL commands via crafted syslog messages.

Affected Software

Name Vendor Start Version End Version
Rsyslogd Rsyslog 0.9.8_stable 0.9.8_stable
Rsyslogd Rsyslog 0.8.2_stable 0.8.2_stable
Rsyslogd Rsyslog * 1.0.1_stable
Rsyslogd Rsyslog * 1.10.1_development
Rsyslogd Rsyslog 0.9.7_stable 0.9.7_stable
Rsyslogd Rsyslog 0.9.6_stable 0.9.6_stable
Rsyslogd Rsyslog 0.9.4_stable 0.9.4_stable
Rsyslogd Rsyslog 0.9.0_stable 0.9.0_stable
Rsyslogd Rsyslog 0.8.1_stable 0.8.1_stable
Rsyslogd Rsyslog 0.9.5_stable 0.9.5_stable
Rsyslogd Rsyslog 0.9.3_stable 0.9.3_stable
Rsyslogd Rsyslog 0.9.1_stable 0.9.1_stable
Rsyslogd Rsyslog 0.8.4_stable 0.8.4_stable
Rsyslogd Rsyslog 0.8.3_stable 0.8.3_stable
Rsyslogd Rsyslog 1.0.0_stable 1.0.0_stable
Rsyslogd Rsyslog 0.8.0_stable 0.8.0_stable
Rsyslogd Rsyslog 0.9.2_stable 0.9.2_stable

References