statusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks.
References
Link | Resource |
---|---|
https://security-tracker.debian.org/tracker/CVE-2010-4658 | Third Party Advisory |
https://www.openwall.com/lists/oss-security/2011/01/25/13 | Mailing List Third Party Advisory |
Configurations
History
No history.
Information
Published : 2020-02-07 16:15
Updated : 2024-02-04 20:39
NVD link : CVE-2010-4658
Mitre link : CVE-2010-4658
CVE.ORG link : CVE-2010-4658
JSON object : View
Products Affected
status
- statusnet
CWE
CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')