CVE-2005-3704: Medium severity Apple iOS and macOS vulnerability
Published Dec 1, 2005
·Updated
System log server in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to spoof syslog messages in log files by injecting various control characters such as newline (NL).
Affected Software
8 affected components
Apple iOS and macOS=10.4.3
Apple Mac OS X Server=10.4.3
Apple iOS and macOS=10.4.1
Apple Mac OS X Server=10.4.2
Apple Mac OS X Server=10.4.1
Apple Mac OS X Server=10.4
Apple iOS and macOS=10.4
Apple iOS and macOS=10.4.2
Remediation
Patch Available
Patch Available
Event History
Dec 1, 2005
CVE Published
02:07 AM
CVE Published
via MITRE·07:02 AM
Data Sourced
via MITRE·07:02 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3704?
CVE-2005-3704 is classified as a moderate severity vulnerability due to its potential for log spoofing.
2
How do I fix CVE-2005-3704?
To fix CVE-2005-3704, users should upgrade to a newer version of Mac OS X or OS X Server that addresses this vulnerability.
3
What versions are affected by CVE-2005-3704?
CVE-2005-3704 affects Mac OS X and OS X Server versions 10.4 through 10.4.3.
4
What impact does CVE-2005-3704 have on log files?
CVE-2005-3704 allows remote attackers to inject control characters into log files, potentially altering log data.
5
Who can exploit CVE-2005-3704?
CVE-2005-3704 can be exploited by remote attackers with network access to the system.