PT-2005-1501 · Elog · Elog

Publicado 2005-02-15 · Atualizado 2017-07-11 · CVE-2005-0439

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ELOG versions prior to 2.5.7

Description The issue is related to a buffer overflow in the decode post function, which allows remote attackers to execute arbitrary code via attachments with long file names.

Recommendations For versions prior to 2.5.7, update to version 2.5.7 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2005-0439

Produtos afetados

Elog

Referências · 6

• 🔥 https://exploit-db.com/exploits/805 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19313 · Nota
• http://sourceforge.net/project/shownotes.php?group_id=40505&release_id=304880 · Correção
• http://midas.psi.ch/elogs/Forum/941 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0439 · Nota de Segurança
• http://securityfocus.com/bid/12556 · Correção