245 matches found
CVE-2006-0597
Removed by vendor...
CVE-2006-0600
elog before 2.5.7 r1558-4 allows remote attackers to cause a denial of service infinite redirection via a request with the fail parameter set to 1, which redirects to the same request...
CVE-2006-0597
The CVE-2006-0597 issue applies to the elog package (elogd.c) in elog before version 2.5.7 r1558-4. The vulnerability is a stack-based buffer overflow triggered by overly long revision attributes, which can cause an application crash (DoS) and potentially allow code execution. Public advisories (...
CVE-2006-0598
CVE-2006-0598 is a buffer overflow in elogd.c of the elog log system, exploitable via writing to the log file on affected versions before the patch. Public sources identify the vulnerability in elog up to version 2.5.7 r1558-4. Debian’s DSA-967-1 and related advisories confirm multiple vulnerabil...
CVE-2006-0599
CVE-2006-0599 affects the elog/elogd components in the Debian elog package prior to version 2.5.7+r1558-4. The vulnerability causes the system to emit different error messages for invalid passwords versus invalid usernames, enabling remote attackers to probe for valid usernames (information discl...
CVE-2006-0598
Buffer overflow in elogd.c in elog before 2.5.7 r1558-4 allows attackers to execute code via unspecified variables, when writing to the log file...
[SECURITY] [DSA 967-1] New elog packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 967-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 967-1] New elog packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 967-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10th, 2006 http://www.debian.org/security/faq -...
DSA-967-1 elog - several
Bulletin has no description...
Directory traversal
Directory traversal vulnerability in ELOG before 2.6.1 allows remote attackers to access arbitrary files outside of the elog directory via "../" dot dot sequences in the URL...
Format string
Format string vulnerability in the writelogfile function in ELOG before 2.6.1 allows remote attackers to cause a denial of service server crash via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-0347
Directory traversal vulnerability in ELOG before 2.6.1 allows remote attackers to access arbitrary files outside of the elog directory via "../" dot dot sequences in the URL...
CVE-2006-0348
Format string vulnerability in the writelogfile function in ELOG before 2.6.1 allows remote attackers to cause a denial of service server crash via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-0348
Removed by vendor...
CVE-2006-0347
The CVE-2006-0347 entry describes a directory traversal vulnerability in elog prior to version 2.6.1, allowing remote attackers to access arbitrary files outside the elog directory via ../ sequences in the URL, causing information disclosure. Debian security advisories (DSA-967-1) indicate fixes ...
CVE-2006-0347
Directory traversal vulnerability in ELOG before 2.6.1 allows remote attackers to access arbitrary files outside of the elog directory via "../" dot dot sequences in the URL...
CVE-2006-0348
Format string vulnerability in the writelogfile function in ELOG before 2.6.1 allows remote attackers to cause a denial of service server crash via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-0348
CVE-2006-0348 affects the ELOG electronic logbook. The vulnerability resides in the write_logfile function as a format string flaw in versions before 2.6.1, which could allow a remote attacker to execute arbitrary code and crash the server. Debian/DSA-967-1 documents fixes to 2.6.1+r1642-1; other...
