NVD

Id
64365  
Name
CVE-2006-5790  
Description
Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) an entry with an attachment whose name contains format string specifiers (el_submit function), and possibly other vectors in the (2) receive_config, (3) show_rss_feed, (4) show_elog_list, (5) show_logbook_node, and (6) server_loop functions.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-11-07  
Modified Date
2011-03-07  
Seq
2006-5790  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
335884 64365 CVE-2006-5790 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=392016  View
335885 64365 CVE-2006-5790 DSA-1242  View
335886 64365 CVE-2006-5790 20876  View
335887 64365 CVE-2006-5790 ADV-2006-4315  View
335888 64365 CVE-2006-5790 elog-elsubmit-format-string(29987)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61154 JVNDB-2006-003420 ELOG の elogd.c におけるフォーマットストリングの脆弱性 ELOG の elogd.c には、フォーマットストリングの脆弱性が存在します。 CVE-2006-5790 21892 CVE-2006-5790 64365 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003420.html 2006-11-07 2012-12-20 View