Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG  Not logged in ELOG logo
Message ID: 2053     Entry time: Wed Nov 8 13:59:52 2006
Icon: Idea  Author: Stefan Ritt  Author Email: stefan.ritt@psi.ch 
Category: Info  OS: All  ELOG Version: 2.6.2-6 
Subject: Denial of Service Vulnerability of elog 2.6.2-6 
Dear ELOG users,

a denial of service vulnerability has been reported which affects all elog versions prior to 2.6.2-7. With a special request one can crash the elogd server, given that one has access either through a public read access or through an account. This vulnerability has been fixed in version 2.6.2-7. It is advised that all sensitive installations of ELOG are being updated.

Stefan Ritt
ELOG V3.1.5-fe60aaf