Launchpad.net

CVE 2010-4658

statusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks.

See the CVE page on Mitre.org for more details.