CVE-2002-2280

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-12-31 · updated 2026-06-16
Weakness: CWE-16

Description

syslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when the machine's IP addressed is changed without rebooting, e.g. via ifconfig, which can cause incorrect information to be sent to the syslog server.

Affected products

OpenBSD: 2.9, 3.0, 3.1, 3.2

References

http://archives.neohapsis.com/archives/bugtraq/2002-11/0272.html
http://www.securityfocus.com/bid/6219
https://exchange.xforce.ibmcloud.com/vulnerabilities/10702
http://archives.neohapsis.com/archives/bugtraq/2002-11/0272.html
http://www.securityfocus.com/bid/6219
https://exchange.xforce.ibmcloud.com/vulnerabilities/10702

Get alerted when CVE-2002-2280 or the next vulnerability affects your stack