Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.80056
Kategorie:Denial of Service
Titel:ELOG < 2.6.2-7 DoS Vulnerability
Zusammenfassung:The version of ELOG Web Logbook installed on the remote host is vulnerable; to a denial of service attack by requesting '/global' or any logbook with 'global' in its name.
Beschreibung:Summary:
The version of ELOG Web Logbook installed on the remote host is vulnerable
to a denial of service attack by requesting '/global' or any logbook with 'global' in its name.

Vulnerability Impact:
When a request like described is received, a NULL pointer dereference occurs,
leading to a crash of the service.

Solution:
Update ELOG to version 2.6.2-7 or later.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2006-6318
BugTraq ID: 21028
http://www.securityfocus.com/bid/21028
Bugtraq: 20061113 ELOG Web Logbook Remote Denial of Service Vulnerability (Google Search)
http://www.securityfocus.com/archive/1/451351
Debian Security Information: DSA-1242 (Google Search)
http://www.debian.org/security/2006/dsa-1242
http://archives.neohapsis.com/archives/fulldisclosure/2006-11/0198.html
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=397875
http://www.osvdb.org/30272
http://securitytracker.com/id?1017450
http://secunia.com/advisories/22800
http://secunia.com/advisories/23580
http://securityreason.com/securityalert/2060
http://www.vupen.com/english/advisories/2006/4423
CopyrightCopyright (C) 2008 Justin Seitz

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.