CVE-1999-0566
MediumExploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
An attacker can write to syslog files from any location, causing a denial of service by filling up the logs and hiding activities.
Risk Assessment
This vulnerability can lead to loss of control over the system and hinder monitoring of activities, increasing the risk of unauthorized access.
Recommendation
It is recommended to restrict access to syslog files and implement monitoring mechanisms to prevent unauthorized data writing.
Other vulnerabilities in syslog
See all- CVE-2016-7660High
An issue was discovered in certain Apple products related to the 'syslog' component. iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3 are affected, allowing local users to gain privileges via unspecified vectors related to Mach port name references.
- CVE-2016-1722High
A vulnerability in syslog on Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
- CVE-1999-0171Low
CVE-1999-0171 vulnerability involves a denial of service (DoS) attack on the syslog system by sending a large number of superfluous messages.
Original NVD description (English source)
An attacker can write to syslog files from any location, causing a denial of service by filling up the logs, and hiding activities.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

