PT-2006-1793 · Apache · Apache Log4Net

Sebastian Krahmer · Publicado 2006-03-09 · Atualizado 2024-06-15 · CVE-2006-0743

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache log4net version 1.2.9

Description A format string issue in LocalSyslogAppender might allow remote attackers to cause a denial of service, resulting in memory corruption and termination, via unknown vectors.

Recommendations For Apache log4net version 1.2.9, consider updating to a newer version that addresses this issue, as using an outdated version may pose a risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2006-0743

GHSA-F9FR-W54Q-772H

OPENSUSE-SU-2024:10072-1

Produtos afetados

Apache Log4Net

Referências · 17

• https://github.com/apache/logging-log4net · Nota
• https://github.com/apache/logging-log4net/commit/ea3faab25fe5f1d4dbda9f5da8dcfa6fc3d9e1b8 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10072-1 · Aviso do Fabricante
• https://web.archive.org/web/20140304060609/https://issues.apache.org/jira/browse/LOG4NET-67 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0743 · Nota de Segurança
• http://novell.com/linux/security/advisories/2006_26_sr.html · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-f9fr-w54q-772h · Aviso do Fabricante
• http://secunia.com/advisories/19241 · Aviso do Fabricante
• http://issues.apache.org/jira/browse/LOG4NET-67 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/0955 · Aviso do Fabricante
• http://secunia.com/advisories/22932 · Aviso do Fabricante
• https://web.archive.org/web/20070114054835/http://novell.com/linux/security/advisories/2006_26_sr.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25196 · Nota
• http://securityfocus.com/bid/17095 · Nota
• https://web.archive.org/web/20200229022118/http://securityfocus.com/bid/17095 · Nota