2.1low
CVE-2002-2280
syslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when the machine's IP addressed is changed witho…
Published 23 y ago · modified 4 mo ago · JSON
CVSS
2.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 21%
Public exploits
0
none known
Summary
syslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when the machine's IP addressed is changed without rebooting, e.g. via ifconfig, which can cause incorrect information to be sent to the syslog server.
Exploit prediction (EPSS)
0.28% probability of exploitation in the next 30 days, higher than 21% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:N/I:P/A:N |
Classification
- Weakness
- CWE-16 Configuration
References
- archives.neohapsis.com /archives/bugtraq/2002-11/0272.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/10702 · vdb-entry, x_refsource_XF, x_transferred
- securityfocus.com /bid/6219 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2002-2280
- NVD: CVE-2002-2280
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.