PT-2002-2992 · Openbsd · Openbsd

Publicado 2002-12-31 · Atualizado 2018-10-30 · CVE-2002-2280

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: OpenBSD versions 2.9 through 3.2

Description: The issue concerns syslogd on OpenBSD, where it fails to update the source IP address of syslog packets when the machine's IP address is changed without a reboot. This can lead to incorrect information being sent to the syslog server.

Recommendations: For OpenBSD versions 2.9 through 3.2, consider restarting the syslogd service after changing the machine's IP address to ensure the correct source IP address is used for syslog packets. Alternatively, reboot the system after changing the IP address to apply the changes correctly.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2002-2280

Produtos afetados

Openbsd

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-2280 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10702 · Nota
• http://securityfocus.com/bid/6219 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2002-11/0272.html · Nota