PT-2006-6469 · Elog · Elog

Ulf Harnhammar

·

Publicado

2006-11-07

·

Atualizado

2017-07-20

·

CVE-2006-5790

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: ELOG versions 2.6.2 and earlier
Description: The issue concerns multiple format string vulnerabilities in the elogd.c file. These vulnerabilities can be exploited by remote attackers to cause a denial of service (crash) and possibly execute arbitrary code. The vulnerabilities can be triggered through an entry with an attachment whose name contains format string specifiers in the el submit function, as well as potentially other vectors in the receive config, show rss feed, show elog list, show logbook node, and server loop functions.
Recommendations: For ELOG versions 2.6.2 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-5790
DSA-1242-1

Produtos afetados

Elog