CVE-2005-3074: Rsyslog Rsyslogd

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute arbitrary SQL commands via crafted syslog messages.

Affected products

• Rsyslog Rsyslogd: up to and including 1.0.1_stable; up to and including 1.10.1_development; version 0.8.0_stable only; version 0.8.1_stable only; version 0.8.2_stable only; version 0.8.3_stable only; …

Published 2005-09-27. Last modified 2026-06-16.