Lucene search
MitreCVE-2010-4840HistorySep 27, 2011 - 7:55 p.m.
CVE-2010-4840
2011-09-2719:55:03
CWE-119
mitre
web.nvd.nist.gov
27
cve-2010-4840
buffer overflows
syslog server
manageengine eventlog analyzer 6.1
denial of service
remote code execution
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.4
Confidence
High
EPSS
0.018
Percentile
88.4%
Multiple buffer overflows in the Syslog server in ManageEngine EventLog Analyzer 6.1 allow remote attackers to cause a denial of service (SysEvttCol.exe process crash) or possibly execute arbitrary code via a long Syslog PRI message header to UDP port (1) 513 or (2) 514. Fixed in 7.2 Build 7020.
Affected configurations
Node
manageengineeventlog_analyzerMatch6.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| manageengine | eventlog_analyzer | 6.1 | cpe:2.3:a:manageengine:eventlog_analyzer:6.1:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2010-4840
2011-09-27 19:55:03
cvelist
cvelist
CVE-2010-4840
2011-09-27 19:00:00
prion
prion
Buffer overflow
2011-09-27 19:55:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.4
Confidence
High
EPSS
0.018
Percentile
88.4%
Related for CVE-2010-4840