statusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks.
References
Link | Resource |
---|---|
https://www.openwall.com/lists/oss-security/2011/01/25/13 | Mailing List Third Party Advisory |
https://security-tracker.debian.org/tracker/CVE-2010-4658 | Third Party Advisory |
Configurations
Information
Published : 2020-02-07 08:15
Updated : 2020-02-11 11:17
NVD link : CVE-2010-4658
Mitre link : CVE-2010-4658
JSON object : View
CWE
CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Products Affected
status
- statusnet