Vulnerability in Openbsd

CVE-2002-2280

syslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when the machine's IP addressed is changed without rebooting, e.g. via ifconfig, which can cause incorrect information to be sent to the syslog server.

EPSS: 0.003 (20.3th percentile) — read the EPSS interpretation.

Affected products

  • Openbsd — versions 2.9, 3.0, 3.1
  • N/a — versions n/a

Weakness classification (CWE)

References