Back to search
CVE-2008-5617
Published: Dec 17, 2008
Modified: Aug 7, 2024
PUBLISHED
Description
The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender directive, which allows remote attackers to bypass intended access restrictions and spoof log messages or create a large number of spurious messages.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://www.rsyslog.com/Article327.phtml
x_refsource_CONFIRM
rsyslog-allowedsender-security-bypass(47080)
vdb-entry
x_refsource_XF
http://www.rsyslog.com/Article322.phtml
x_refsource_CONFIRM
http://www.rsyslog.com/Topic4.phtml
x_refsource_CONFIRM
32630
vdb-entry
x_refsource_BID
32857
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now