PT-2008-6672 · Rsyslog · Rsyslog

Publicado 2008-12-17 · Atualizado 2017-08-08 · CVE-2008-5617

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions rsyslog versions 3.12.1 through 3.20.0 rsyslog version 4.1.0 rsyslog version 4.1.1

Description The issue concerns the ACL handling in rsyslog, where it fails to follow the $AllowedSender directive. This allows remote attackers to bypass intended access restrictions. As a result, attackers can spoof log messages or create a large number of spurious messages.

Recommendations For rsyslog versions 3.12.1 through 3.20.0, consider restricting access to the logging mechanism to minimize the risk of exploitation. For rsyslog version 4.1.0, restrict access to the logging mechanism to minimize the risk of exploitation. For rsyslog version 4.1.1, restrict access to the logging mechanism to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-5617

Produtos afetados

Rsyslog

Referências · 10

• http://secunia.com/advisories/32857 · Aviso do Fabricante
• http://securityfocus.com/bid/32630 · Nota
• https://security-tracker.debian.org/tracker/CVE-2008-5617 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47080 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5617 · Nota de Segurança
• http://rsyslog.com/Article322.phtml · Aviso do Fabricante
• http://rsyslog.com/Topic4.phtml · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-5617 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2008-5617 · Aviso do Fabricante
• http://rsyslog.com/Article327.phtml · Nota