CVE-2008-0445

The replaceinlineimg function in elogd in Electronic Logbook ELOG before 2.7.1 allows remote attackers to cause a denial of service infinite loop via crafted logbook entries. NOTE: some of these details are obtained from third party information...

Information disclosure

The replaceinlineimg function in elogd in Electronic Logbook ELOG before 2.7.1 allows remote attackers to cause a denial of service infinite loop via crafted logbook entries. NOTE: some of these details are obtained from third party information...

CVE-2008-0445

The CVE-2008-0445 issue affects Electronic Logbook (ELOG) prior to version 2.7.1. The vulnerability lies in the replace_inline_img function in elogd, which can be triggered by crafted logbook entries to cause a denial of service (infinite loop). Public sources (NVD/OpenVAS entries) confirm the af...

CVE-2006-6318

The showeloglist function in elogd.c in elog 2.6.2 and earlier allows remote authenticated users to cause a denial of service daemon crash by attempting to access a logbook whose name begins with "global," which results in a NULL pointer dereference. NOTE: some of these details are obtained from...

CVE-2005-4439

Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a URL with a long 1 cmd or 2 mode parameter...

CVE-2005-4439

Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a URL with a long 1 cmd or 2 mode parameter...

CVE-2005-4439

Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a URL with a long 1 cmd or 2 mode parameter...

CVE-2005-4439

Removed by vendor...

CVE-2005-4439

CVE-2005-4439 affects the elog/elogd component in ELOG prior to corrected releases. The issue is a buffer overflow when processing URL parameters (notably long cmd or mode parameters), enabling remote attackers to crash the application and potentially execute arbitrary code. Connected advisories ...