System log server in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to spoof syslog messages in log files by injecting various control characters such as newline (NL).
Name | Vendor | Start Version | End Version |
---|---|---|---|
Mac_os_x | Apple | 10.4 (including) | 10.4 (including) |
Mac_os_x | Apple | 10.4.1 (including) | 10.4.1 (including) |
Mac_os_x | Apple | 10.4.2 (including) | 10.4.2 (including) |
Mac_os_x | Apple | 10.4.3 (including) | 10.4.3 (including) |
Mac_os_x_server | Apple | 10.4 (including) | 10.4 (including) |
Mac_os_x_server | Apple | 10.4.1 (including) | 10.4.1 (including) |
Mac_os_x_server | Apple | 10.4.2 (including) | 10.4.2 (including) |
Mac_os_x_server | Apple | 10.4.3 (including) | 10.4.3 (including) |