Published: 21/12/2005 Updated: 20/07/2017

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote malicious users to cause a denial of service (application crash) and possibly execute arbitrary code via a URL with a long (1) cmd or (2) mode parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
elog elogd 2.6.0_beta4

Debian Bug report logs - #349528 various unfixed security bugs Package: elog; Maintainer for elog is Roger Kalt <rogerkalt@gmailcom>; Source for elog is src:elog (PTS, buildd, popcon) Reported by: Florian Weimer <fw@denebenyode> Date: Mon, 23 Jan 2006 15:48:16 UTC Severity: grave Tags: fixed, fixed-upstream, sec ...

Several security problems have been found in elog, an electronic logbook to manage notes The Common Vulnerabilities and Exposures Project identifies the following problems: CVE-2005-4439 "GroundZero Security" discovered that elog insufficiently checks the size of a buffer used for processing URL parameters, which might lead to the exe ...

NVD-CWE-Other http://secunia.com/advisories/18124 http://www.securityfocus.com/bid/15932 http://securitytracker.com/id?1015379 http://www.debian.org/security/2006/dsa-967 http://secunia.com/advisories/18783 http://www.osvdb.org/21844 http://www.vupen.com/english/advisories/2005/3000 http://marc.info/?l=full-disclosure&m=113498708213563&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/24703 https://exchange.xforce.ibmcloud.com/vulnerabilities/23838 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349528 https://nvd.nist.gov https://www.debian.org/security/./dsa-967

CVE-2005-4439

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect