Description
The default configuration of syslogd in the Linux sysklogd package does not enable the -x (disable name lookups) option, which allows remote attackers to cause a denial of service (traffic amplification) via messages with spoofed source IP addresses.
References
- 20060331 DoS-ing sysklogd? mailing-list
- 20060402 RE: DoS-ing sysklogd? mailing-list
- sysklogd-sourceip-dos(25672) vdb-entry