CVE-2005-3074 SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute arbitrary SQL commands via crafted syslog messages.
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute arbitrary SQL commands via crafted syslog messages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rsyslogd | <= 1.0.1_stable | No fix listed |
| rsyslogd | <= 1.10.1_development | No fix listed |
| rsyslogd | = 0.8.0_stable | No fix listed |
| rsyslogd | = 0.8.1_stable | No fix listed |
| rsyslogd | = 0.8.2_stable | No fix listed |
| rsyslogd | = 0.8.3_stable | No fix listed |
| rsyslogd | = 0.8.4_stable | No fix listed |
| rsyslogd | = 0.9.0_stable | No fix listed |
| rsyslogd | = 0.9.1_stable | No fix listed |
| rsyslogd | = 0.9.2_stable | No fix listed |
| rsyslogd | = 0.9.3_stable | No fix listed |
| rsyslogd | = 0.9.4_stable | No fix listed |
| rsyslogd | = 0.9.5_stable | No fix listed |
| rsyslogd | = 0.9.6_stable | No fix listed |
| rsyslogd | = 0.9.7_stable | No fix listed |
| rsyslogd | = 0.9.8_stable | No fix listed |
| rsyslogd | = 1.0.0_stable | No fix listed |
References
- 16947 patch third-party-advisory
- www.rsyslog.com