Lucene search

MitreCVE-2005-4439

HistoryDec 21, 2005 - 1:03 a.m.

CVE-2005-4439

2005-12-2101:03:00

mitre

web.nvd.nist.gov

cve-2005-4439

buffer overflow

elog

elogd

denial of service

remote attackers

arbitrary code

nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

7.8

Confidence

Low

EPSS

0.093

Percentile

94.7%

JSON

Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a URL with a long (1) cmd or (2) mode parameter.

Affected configurations

Nvd

Node

elogelogdMatch2.6.0_beta4

VendorProductVersionCPE
elogelogd2.6.0_beta4cpe:2.3:a:elog:elogd:2.6.0_beta4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
elog	elogd	2.6.0_beta4	cpe:2.3:a:elog:elogd:2.6.0_beta4:::::::*

References

marc.info/?l=full-disclosure&m=113498708213563&w=2

secunia.com/advisories/18124

secunia.com/advisories/18783

securitytracker.com/id?1015379

www.debian.org/security/2006/dsa-967

www.osvdb.org/21844

www.securityfocus.com/bid/15932

www.vupen.com/english/advisories/2005/3000

exchange.xforce.ibmcloud.com/vulnerabilities/23838

exchange.xforce.ibmcloud.com/vulnerabilities/24703

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

7.8

Confidence

Low

EPSS

0.093

Percentile

94.7%

JSON

Related for CVE-2005-4439