Vulnerability in Rsyslog Rsyslogd

CVE-2005-3074

SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute arbitrary SQL commands via crafted syslog messages.

EPSS: 0.011 (62.6th percentile) — read the EPSS interpretation.

Affected products

  • Rsyslog Rsyslogd — versions 0.8.0_stable, 0.8.1_stable, 0.8.2_stable
  • N/a — versions n/a

References