Read the docs
TI-2008-05753 Aliases CVE-2008-6058GHSA-h63h-r2p2-8q72

Syslserve 1.058 and earlier, and probably 1.059, allows remote attackers to cause a…

Priority LOW 26CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Syslserve 1.058 and earlier, and probably 1.059, allows remote attackers to cause a denial of service (hang) via a crafted UDP Syslog packet.

Why it matters now

EPSS 0.01397 72nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 13

CPEVersionsRoleVendor
cpe:2.3:a:syslserve:syslserve:*:*:*:*:*:*:*:*up to 1.059VulnerableSyslserve
cpe:2.3:a:syslserve:syslserve:1.01:*:*:*:*:*:*:*1.01VulnerableSyslserve
cpe:2.3:a:syslserve:syslserve:1.02:*:*:*:*:*:*:*1.02VulnerableSyslserve
cpe:2.3:a:syslserve:syslserve:1.03:*:*:*:*:*:*:*1.03VulnerableSyslserve
cpe:2.3:a:syslserve:syslserve:1.04:*:*:*:*:*:*:*1.04VulnerableSyslserve
cpe:2.3:a:syslserve:syslserve:1.05:*:*:*:*:*:*:*1.05VulnerableSyslserve
cpe:2.3:a:syslserve:syslserve:1.051:*:*:*:*:*:*:*1.051VulnerableSyslserve
cpe:2.3:a:syslserve:syslserve:1.052:*:*:*:*:*:*:*1.052VulnerableSyslserve
cpe:2.3:a:syslserve:syslserve:1.053:*:*:*:*:*:*:*1.053VulnerableSyslserve
cpe:2.3:a:syslserve:syslserve:1.054:*:*:*:*:*:*:*1.054VulnerableSyslserve
  • cpe:2.3:a:syslserve:syslserve:*:*:*:*:*:*:*:* Versions up to 1.059 Vulnerable ·Syslserve
  • cpe:2.3:a:syslserve:syslserve:1.01:*:*:*:*:*:*:* Versions 1.01 Vulnerable ·Syslserve
  • cpe:2.3:a:syslserve:syslserve:1.02:*:*:*:*:*:*:* Versions 1.02 Vulnerable ·Syslserve
  • cpe:2.3:a:syslserve:syslserve:1.03:*:*:*:*:*:*:* Versions 1.03 Vulnerable ·Syslserve
  • cpe:2.3:a:syslserve:syslserve:1.04:*:*:*:*:*:*:* Versions 1.04 Vulnerable ·Syslserve
  • cpe:2.3:a:syslserve:syslserve:1.05:*:*:*:*:*:*:* Versions 1.05 Vulnerable ·Syslserve
  • cpe:2.3:a:syslserve:syslserve:1.051:*:*:*:*:*:*:* Versions 1.051 Vulnerable ·Syslserve
  • cpe:2.3:a:syslserve:syslserve:1.052:*:*:*:*:*:*:* Versions 1.052 Vulnerable ·Syslserve
  • cpe:2.3:a:syslserve:syslserve:1.053:*:*:*:*:*:*:* Versions 1.053 Vulnerable ·Syslserve
  • cpe:2.3:a:syslserve:syslserve:1.054:*:*:*:*:*:*:* Versions 1.054 Vulnerable ·Syslserve
Show 3 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:syslserve:syslserve:1.055:*:*:*:*:*:*:*1.055VulnerableSyslserve
cpe:2.3:a:syslserve:syslserve:1.056:*:*:*:*:*:*:*1.056VulnerableSyslserve
cpe:2.3:a:syslserve:syslserve:1.058:*:*:*:*:*:*:*1.058VulnerableSyslserve
  • cpe:2.3:a:syslserve:syslserve:1.055:*:*:*:*:*:*:* Versions 1.055 Vulnerable ·Syslserve
  • cpe:2.3:a:syslserve:syslserve:1.056:*:*:*:*:*:*:* Versions 1.056 Vulnerable ·Syslserve
  • cpe:2.3:a:syslserve:syslserve:1.058:*:*:*:*:*:*:* Versions 1.058 Vulnerable ·Syslserve

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2008-6058
  2. 2026-10-03 Alias added: GHSA-h63h-r2p2-8q72

References

Other 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences