OSVDB ID: 21277 Title: Apple Mac OS X syslog Spoofed Log Entry Insertion |
Info |
|
|
Dates |
||||
|
|
Description |
Mac OS X contains a flaw that may allow a malicious user to forge syslog entries. The issue is triggered when an attacker uses control characters to manipulate the appearance of syslog entries. It is possible that the flaw may allow inaccurate entries resulting in a loss of integrity. |
Classification |
Location:
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Public Disclosure: OSVDB Verified |
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, Apple has released a patch to address this vulnerability. |
Products |
|
References |
|
Credit |
|