CVE-2005-4439 - Vulnerability Details - OpenCVE

Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a URL with a long (1) cmd or (2) mode parameter.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Elog	Elogd

Configuration 1 [-]

cpe:2.3:a:elog:elogd:2.6.0_beta4:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://marc.info/?l=full-disclosure&m=113498708213563&w=2
http://secunia.com/advisories/18124
http://secunia.com/advisories/18783
http://securitytracker.com/id?1015379
http://www.debian.org/security/2006/dsa-967
http://www.osvdb.org/21844
http://www.securityfocus.com/bid/15932
http://www.vupen.com/english/advisories/2005/3000
https://exchange.xforce.ibmcloud.com/vulnerabilities/23838
https://exchange.xforce.ibmcloud.com/vulnerabilities/24703

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-12-21T01:00:00

Updated: 2024-08-07T23:46:04.622Z

Reserved: 2005-12-21T00:00:00

Link: CVE-2005-4439

Vulnrichment

No data.

NVD

Status : Modified

Published: 2005-12-21T01:03:00.000

Modified: 2024-11-21T00:04:15.863

Link: CVE-2005-4439

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-12-19T00:00:00", "descriptions": [{"lang": "en", "value": "Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a URL with a long (1) cmd or (2) mode parameter."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-19T15:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "18124", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/18124"}, {"name": "elog-cmd-mode-bo(24703)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24703"}, {"name": "elogd-http-request-bo(23838)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23838"}, {"name": "18783", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/18783"}, {"name": "21844", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/21844"}, {"name": "ADV-2005-3000", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2005/3000"}, {"name": "20051219 elogd 2.6.0 overflow", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://marc.info/?l=full-disclosure&m=113498708213563&w=2"}, {"name": "1015379", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1015379"}, {"name": "15932", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/15932"}, {"name": "DSA-967", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2006/dsa-967"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-4439", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a URL with a long (1) cmd or (2) mode parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "18124", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/18124"}, {"name": "elog-cmd-mode-bo(24703)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24703"}, {"name": "elogd-http-request-bo(23838)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23838"}, {"name": "18783", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/18783"}, {"name": "21844", "refsource": "OSVDB", "url": "http://www.osvdb.org/21844"}, {"name": "ADV-2005-3000", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2005/3000"}, {"name": "20051219 elogd 2.6.0 overflow", "refsource": "FULLDISC", "url": "http://marc.info/?l=full-disclosure&m=113498708213563&w=2"}, {"name": "1015379", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1015379"}, {"name": "15932", "refsource": "BID", "url": "http://www.securityfocus.com/bid/15932"}, {"name": "DSA-967", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2006/dsa-967"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T23:46:04.622Z"}, "title": "CVE Program Container", "references": [{"name": "18124", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/18124"}, {"name": "elog-cmd-mode-bo(24703)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24703"}, {"name": "elogd-http-request-bo(23838)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23838"}, {"name": "18783", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/18783"}, {"name": "21844", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/21844"}, {"name": "ADV-2005-3000", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2005/3000"}, {"name": "20051219 elogd 2.6.0 overflow", "tags": ["mailing-list", "x_refsource_FULLDISC", "x_transferred"], "url": "http://marc.info/?l=full-disclosure&m=113498708213563&w=2"}, {"name": "1015379", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1015379"}, {"name": "15932", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/15932"}, {"name": "DSA-967", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2006/dsa-967"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-4439", "datePublished": "2005-12-21T01:00:00", "dateReserved": "2005-12-21T00:00:00", "dateUpdated": "2024-08-07T23:46:04.622Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:elog:elogd:2.6.0_beta4:*:*:*:*:*:*:*", "matchCriteriaId": "E39A9AA4-18C5-4D37-9BEC-63FA87B49F31", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a URL with a long (1) cmd or (2) mode parameter."}], "id": "CVE-2005-4439", "lastModified": "2024-11-21T00:04:15.863", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2005-12-21T01:03:00.000", "references": [{"source": "cve@mitre.org", "url": "http://marc.info/?l=full-disclosure&m=113498708213563&w=2"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Vendor Advisory"], "url": "http://secunia.com/advisories/18124"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/18783"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1015379"}, {"source": "cve@mitre.org", "url": "http://www.debian.org/security/2006/dsa-967"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/21844"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/15932"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2005/3000"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23838"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24703"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://marc.info/?l=full-disclosure&m=113498708213563&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Vendor Advisory"], "url": "http://secunia.com/advisories/18124"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/18783"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1015379"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2006/dsa-967"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/21844"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/15932"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2005/3000"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23838"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24703"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}