PT-2006-1793 · Apache · Apache Log4Net

Sebastian Krahmer · Published 2006-03-09 · Updated 2024-06-15 · CVE-2006-0743

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache log4net version 1.2.9

Description A format string issue in LocalSyslogAppender might allow remote attackers to cause a denial of service, resulting in memory corruption and termination, via unknown vectors.

Recommendations For Apache log4net version 1.2.9, consider updating to a newer version that addresses this issue, as using an outdated version may pose a risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2006-0743

GHSA-F9FR-W54Q-772H

OPENSUSE-SU-2024:10072-1

Affected Products

Apache Log4Net

References · 17

• https://osv.dev/vulnerability/openSUSE-SU-2024:10072-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0743 · Security Note
• http://novell.com/linux/security/advisories/2006_26_sr.html · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-f9fr-w54q-772h · Vendor Advisory
• http://secunia.com/advisories/19241 · Vendor Advisory
• http://issues.apache.org/jira/browse/LOG4NET-67 · Vendor Advisory
• http://vupen.com/english/advisories/2006/0955 · Vendor Advisory
• http://secunia.com/advisories/22932 · Vendor Advisory
• https://github.com/apache/logging-log4net · Note
• https://github.com/apache/logging-log4net/commit/ea3faab25fe5f1d4dbda9f5da8dcfa6fc3d9e1b8 · Note
• https://web.archive.org/web/20140304060609/https://issues.apache.org/jira/browse/LOG4NET-67 · Note
• https://web.archive.org/web/20070114054835/http://novell.com/linux/security/advisories/2006_26_sr.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25196 · Note
• http://securityfocus.com/bid/17095 · Note
• https://web.archive.org/web/20200229022118/http://securityfocus.com/bid/17095 · Note