PT-2005-1501 · Elog · Elog

Published 2005-02-15 · Updated 2017-07-11 · CVE-2005-0439

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ELOG versions prior to 2.5.7

Description The issue is related to a buffer overflow in the decode post function, which allows remote attackers to execute arbitrary code via attachments with long file names.

Recommendations For versions prior to 2.5.7, update to version 2.5.7 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2005-0439

Affected Products

Elog

References · 6

• 🔥 https://exploit-db.com/exploits/805 · Exploit
• http://sourceforge.net/project/shownotes.php?group_id=40505&release_id=304880 · Patch
• http://midas.psi.ch/elogs/Forum/941 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0439 · Security Note
• http://securityfocus.com/bid/12556 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19313 · Note