CVEvulnerability

CVE-2005-3074

7.5 HIGH Published 2005-09-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-09-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute arbitrary SQL commands via crafted syslog messages.

Affected configurations

• rsyslog rsyslogd (<= 1.0.1 stable) • rsyslog rsyslogd (<= 1.10.1 development) • rsyslog rsyslogd 0.8.0 stable • rsyslog rsyslogd 0.8.1 stable • rsyslog rsyslogd 0.8.2 stable • rsyslog rsyslogd 0.8.3 stable • rsyslog rsyslogd 0.8.4 stable • rsyslog rsyslogd 0.9.0 stable • rsyslog rsyslogd 0.9.1 stable • rsyslog rsyslogd 0.9.2 stable • rsyslog rsyslogd 0.9.3 stable • rsyslog rsyslogd 0.9.4 stable • rsyslog rsyslogd 0.9.5 stable • rsyslog rsyslogd 0.9.6 stable • rsyslog rsyslogd 0.9.7 stable • rsyslog rsyslogd 0.9.8 stable • rsyslog rsyslogd 1.0.0 stable

References