245 matches found
ELOG < 2.6.1 Multiple Remote Vulnerabilities (Traversal, FS)
The remote host appears to be using ELOG, a web-based electronic logbook application. The version of ELOG installed on the remote host fails to filter directory traversal strings before processing GET requests. An attacker can exploit this issue to retrieve the contents of arbitrary files from th...
[SA18533] ELOG Format String and Directory Traversal Vulnerabilities
TITLE: ELOG Format String and Directory Traversal Vulnerabilities SECUNIA ADVISORY ID: SA18533 VERIFY ADVISORY: http://secunia.com/advisories/18533/ CRITICAL: Highly critical IMPACT: Security Bypass, DoS, System access WHERE: From remote SOFTWARE: ELOG 2.x http://secunia.com/product/4657/...
CVE-2005-4439
Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a URL with a long 1 cmd or 2 mode parameter...
CVE-2005-4439
Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a URL with a long 1 cmd or 2 mode parameter...
CVE-2005-4439
Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a URL with a long 1 cmd or 2 mode parameter...
CVE-2005-4439
CVE-2005-4439 affects the elog/elogd component in ELOG prior to corrected releases. The issue is a buffer overflow when processing URL parameters (notably long cmd or mode parameters), enabling remote attackers to crash the application and potentially execute arbitrary code. Connected advisories ...
CVE-2005-4439
Removed by vendor...
[SA18124] ELOG Long Parameter Value Denial of Service Vulnerability
TITLE: ELOG Long Parameter Value Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18124 VERIFY ADVISORY: http://secunia.com/advisories/18124/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: ELOG 2.x http://secunia.com/product/4657/ DESCRIPTION: sk has discovered a...
ELOG Remote Buffer Overflow Vulnerabilities
The remote host appears to be using ELOG, a web-based electronic logbook application. The version of ELOG installed on the remote host crashes when it receives HTTP requests with excessive data for the 'mode' and 'cmd' parameters. An unauthenticated attacker may be able to exploit these issues to...
CVE-2005-0439
Buffer overflow in the decodepost function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via attachments with long file names...
CVE-2005-0440
ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a sensitive write password via a modified URL...
CVE-2005-0439
Buffer overflow in the decodepost function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via attachments with long file names...
CVE-2005-0440
ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a sensitive write password via a modified URL...
ELOG Web Logbook < 2.5.7 Multiple Remote Vulnerabilities (OF, Traversal)
The remote host is running ELOG Web Logbook, a free webinterface logbook. According to its banner, the version of ELOG Web Logbook installed on the remote host contains a buffer overflow that can be triggered when handing attachment with names longer than 256 characters to execute code on the...
CVE-2005-0439
Buffer overflow in the decodepost function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via attachments with long file names...
CVE-2005-0440
ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a sensitive write password via a modified URL...
CVE-2005-0439
Removed by vendor...
CVE-2005-0440
Removed by vendor...
CVE-2005-0440
CVE-2005-0440 affects ELOG Web Logbook prior to 2.5.7. An unauthenticated attacker can craft a modified URL to bypass authentication and retrieve a configuration file that contains a sensitive write password. Affected component: ELOG Web Logbook (server-side). Impact: partial confidentiality of t...