277 matches found
CVE-2006-0347
The CVE-2006-0347 entry describes a directory traversal vulnerability in elog prior to version 2.6.1, allowing remote attackers to access arbitrary files outside the elog directory via ../ sequences in the URL, causing information disclosure. Debian security advisories (DSA-967-1) indicate fixes ...
CVE-2006-0347
Directory traversal vulnerability in ELOG before 2.6.1 allows remote attackers to access arbitrary files outside of the elog directory via "../" dot dot sequences in the URL...
CVE-2006-0348
Format string vulnerability in the writelogfile function in ELOG before 2.6.1 allows remote attackers to cause a denial of service server crash via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-0348
CVE-2006-0348 affects the ELOG electronic logbook. The vulnerability resides in the write_logfile function as a format string flaw in versions before 2.6.1, which could allow a remote attacker to execute arbitrary code and crash the server. Debian/DSA-967-1 documents fixes to 2.6.1+r1642-1; other...
CVE-2006-0347
Removed by vendor...
CVE-2006-0348
Removed by vendor...
CVE-2006-0347: Undefined Security Weakness
Directory traversal vulnerability in ELOG before 2.6.1 allows remote attackers to access arbitrary files outside of the elog directory via "../" dot dot sequences in the URL...
CVE-2006-0348: Undefined Security Weakness
Format string vulnerability in the writelogfile function in ELOG before 2.6.1 allows remote attackers to cause a denial of service server crash via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
ELOG < 2.6.2 Multiple Vulnerabilities
Binary data 3379.prm...
ELOG < 2.6.1 Multiple Remote Vulnerabilities (Traversal, FS)
The remote host appears to be using ELOG, a web-based electronic logbook application. The version of ELOG installed on the remote host fails to filter directory traversal strings before processing GET requests. An attacker can exploit this issue to retrieve the contents of arbitrary files from th...
[SA18533] ELOG Format String and Directory Traversal Vulnerabilities
TITLE: ELOG Format String and Directory Traversal Vulnerabilities SECUNIA ADVISORY ID: SA18533 VERIFY ADVISORY: http://secunia.com/advisories/18533/ CRITICAL: Highly critical IMPACT: Security Bypass, DoS, System access WHERE: From remote SOFTWARE: ELOG 2.x http://secunia.com/product/4657/...
CVE-2005-4439
Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a URL with a long 1 cmd or 2 mode parameter...
CVE-2005-4439
Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a URL with a long 1 cmd or 2 mode parameter...
CVE-2005-4439
CVE-2005-4439 affects the elog/elogd component in ELOG prior to corrected releases. The issue is a buffer overflow when processing URL parameters (notably long cmd or mode parameters), enabling remote attackers to crash the application and potentially execute arbitrary code. Connected advisories ...
CVE-2005-4439
Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a URL with a long 1 cmd or 2 mode parameter...
CVE-2005-4439
Removed by vendor...
CVE-2005-4439: Undefined Security Weakness
Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a URL with a long 1 cmd or 2 mode parameter...
[SA18124] ELOG Long Parameter Value Denial of Service Vulnerability
TITLE: ELOG Long Parameter Value Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18124 VERIFY ADVISORY: http://secunia.com/advisories/18124/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: ELOG 2.x http://secunia.com/product/4657/ DESCRIPTION: sk has discovered a...
ELOG Remote Buffer Overflow Vulnerabilities
The remote host appears to be using ELOG, a web-based electronic logbook application. The version of ELOG installed on the remote host crashes when it receives HTTP requests with excessive data for the 'mode' and 'cmd' parameters. An unauthenticated attacker may be able to exploit these issues to...