Unscored severity · published Sep 27, 2005
CVE-2005-3074
SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute arbitrary SQL commands via crafted syslog messages
–
CVSS
1.1%
EPSS
No
On KEV
Description
SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute arbitrary SQL commands via crafted syslog messages.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RS
Rsyslogd · Rsyslog
through 1.0.1_stable; through 1.10.1_development; 0.8.0_stable; 0.8.1_stable; 0.8.2_stable; 0.8.3_stable; +11 more · source: NVD