277 matches found
CVE-2006-0598
Buffer overflow in elogd.c in elog before 2.5.7 r1558-4 allows attackers to execute code via unspecified variables, when writing to the log file...
CVE-2006-0598
CVE-2006-0598 is a buffer overflow in elogd.c of the elog log system, exploitable via writing to the log file on affected versions before the patch. Public sources identify the vulnerability in elog up to version 2.5.7 r1558-4. Debian’s DSA-967-1 and related advisories confirm multiple vulnerabil...
CVE-2006-0597
The CVE-2006-0597 issue applies to the elog package (elogd.c) in elog before version 2.5.7 r1558-4. The vulnerability is a stack-based buffer overflow triggered by overly long revision attributes, which can cause an application crash (DoS) and potentially allow code execution. Public advisories (...
CVE-2006-0600
CVE-2006-0600 affects elog, a logbook app. The issue is an input handling flaw in the fail parameter that can trigger an infinite redirect, enabling denial of service. Debian’s DSA-967-1 and OpenVAS notes confirm the vulnerability and list affected versions; fixes were released as elog 2.5.7+r155...
CVE-2006-0599
The 1 elog.c and 2 elogd.c components in elog before 2.5.7 r1558-4 generate different responses depending on whether or not a username is valid, which allows remote attackers to determine valid usernames...
CVE-2006-0600
elog before 2.5.7 r1558-4 allows remote attackers to cause a denial of service infinite redirection via a request with the fail parameter set to 1, which redirects to the same request...
CVE-2006-0599
Removed by vendor...
CVE-2006-0600
Removed by vendor...
CVE-2006-0597
Removed by vendor...
CVE-2006-0597: Undefined Security Weakness
Multiple stack-based buffer overflows in elogd.c in elog before 2.5.7 r1558-4 allow attackers to cause a denial of service application crash and possibly execute code via long "revision attributes"...
CVE-2006-0600: Undefined Security Weakness
elog before 2.5.7 r1558-4 allows remote attackers to cause a denial of service infinite redirection via a request with the fail parameter set to 1, which redirects to the same request...
CVE-2006-0598: Undefined Security Weakness
Buffer overflow in elogd.c in elog before 2.5.7 r1558-4 allows attackers to execute code via unspecified variables, when writing to the log file...
CVE-2006-0599: Undefined Security Weakness
The 1 elog.c and 2 elogd.c components in elog before 2.5.7 r1558-4 generate different responses depending on whether or not a username is valid, which allows remote attackers to determine valid usernames...
[SECURITY] [DSA 967-1] New elog packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 967-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 967-1] New elog packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 967-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10th, 2006 http://www.debian.org/security/faq -...
DSA-967-1 elog - several
Bulletin has no description...
Directory traversal
Directory traversal vulnerability in ELOG before 2.6.1 allows remote attackers to access arbitrary files outside of the elog directory via "../" dot dot sequences in the URL...
Format string
Format string vulnerability in the writelogfile function in ELOG before 2.6.1 allows remote attackers to cause a denial of service server crash via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-0348
Format string vulnerability in the writelogfile function in ELOG before 2.6.1 allows remote attackers to cause a denial of service server crash via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...