Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Accepting user input in log files can result in log forging. For example, if a user enters CRLF sequences ( carriage return and line feed (CRLF) sequences, it may be possible to break apart a legit log entry into two. The second entry can be made to be purposely misleading, for instance, it may warn the administrator that a reboot is required to install critical security updates.

...