CVE-2002-2280: OpenBSD

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

syslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when the machine's IP addressed is changed without rebooting, e.g. via ifconfig, which can cause incorrect information to be sent to the syslog server.

Affected products

• OpenBSD OpenBSD: version 2.9 only; version 3.0 only; version 3.1 only; version 3.2 only

Published 2002-12-31. Last modified 2026-06-16.