Description
System log server in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to spoof syslog messages in log files by injecting various control characters such as newline (NL).
References
- macos-syslog-forgery(23344) vdb-entry
- 17813 third-party-advisory
- ADV-2005-2659 vdb-entry
- 1015293 vdb-entry
- APPLE-SA-2005-11-29 vendor-advisory
- 21277 vdb-entry
- 15647 vdb-entry