PT-2002-2992 · Openbsd · Openbsd

Published 2002-12-31 · Updated 2018-10-30 · CVE-2002-2280

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: OpenBSD versions 2.9 through 3.2

Description: The issue concerns syslogd on OpenBSD, where it fails to update the source IP address of syslog packets when the machine's IP address is changed without a reboot. This can lead to incorrect information being sent to the syslog server.

Recommendations: For OpenBSD versions 2.9 through 3.2, consider restarting the syslogd service after changing the machine's IP address to ensure the correct source IP address is used for syslog packets. Alternatively, reboot the system after changing the IP address to apply the changes correctly.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2002-2280

Affected Products

Openbsd

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-2280 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10702 · Note
• http://securityfocus.com/bid/6219 · Note
• http://archives.neohapsis.com/archives/bugtraq/2002-11/0272.html · Note