VULHUB ™

A weakness in the remote reporting functionality of syslogd has been discovered. It is possible for syslog to send false information to a remote syslogd server. This problem occurs when a host has its IP address reconfigured and is not then rebooted. In this situation, any logs generated by syslog on the recently reconfigured host, will be sent to a remote syslog server with the previous IP address and not the currently configured IP address.

A weakness in the remote reporting functionality of syslogd has been discovered. It is possible for syslog to send false information to a remote syslogd server. This problem occurs when a host has its IP address reconfigured and is not then rebooted. In this situation, any logs generated by syslog on the recently reconfigured host, will be sent to a remote syslog server with the previous IP address and not the currently configured IP address.