Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 695 of 808  Not logged in ELOG logo
ID Date Icon Authordown Author Email Category OS ELOG Version Subject
  1592   Fri Jan 13 03:21:32 2006 Cool Chris Warnerchristopher_warner@dcd.uscourts.govQuestionLinux Problem selecting ports
I had problems getting elog to run on port 8080 (or many others). I have it installed on Redhat Enterprise Linux rel 4. The only way I was able to get it working was using port 80. I would like to run it on a different port if possible but I'm not sure what is wrong.

Any Ideas
  1593   Fri Jan 13 13:16:25 2006 Question Chris Warnerchristopher_warner@dcd.uscourts.govQuestionLinux Automatic Copy to
Is it possible to configure elog to copy a new entry from 1 logbook to another?
  1596   Tue Jan 17 13:59:58 2006 Agree Chris Warnerchristopher_warner@dcd.uscourts.govQuestionLinux Re: Problem selecting ports
Nevermind. this was an iptables issue.

Chris Warner wrote:
I had problems getting elog to run on port 8080 (or many others). I have it installed on Redhat Enterprise Linux rel 4. The only way I was able to get it working was using port 80. I would like to run it on a different port if possible but I'm not sure what is wrong.

Any Ideas
  1597   Tue Jan 17 14:09:17 2006 Question Chris Warnerchristopher_warner@dcd.uscourts.govQuestionLinux Email based on not attribute value
Is it possible to send an email if an attribute is not equal to a specific value?

For instance, I have a server logbook that several people are able to write to. There is one person that is ultimately responsible for this server. I would like to generate an email any time that someone other than the System Administrator creates a new entry.

Thanks,

Chris Warner
  1607   Wed Jan 18 17:20:45 2006 Warning Chris Warnerchristopher_warner@dcd.uscourts.govBug reportLinux2.6Buffer Overflow?
Users can access root level directories by using a modified URL. I saw on some security web sites that this was a problem in previous versions. Was it not fixed in 2.6?

To recreate enter http://yourhost.yourdomain.com/../../../../etc/passwd

view your password file in the browser.


If this was previously reported, is there a fix?

Chris Warner
  1615   Fri Jan 20 02:53:40 2006 Smile Chris Warnerchristopher_warner@dcd.uscourts.govCommentLinux2.6Re: Buffer Overflow?

Stefan Ritt wrote:

Chris Warner wrote:
Users can access root level directories by using a modified URL. I saw on some security web sites that this was a problem in previous versions. Was it not fixed in 2.6?

To recreate enter http://yourhost.yourdomain.com/../../../../etc/passwd

view your password file in the browser.

If this was previously reported, is there a fix?

Chris Warner


Thanks for telling me, I didn't know. I was able to reproduce your problem under certain conditions, and I just released version 2.6.1 to fix it. However it has nothing to do with an old buffer overflow (see elog:941).

I would strongly advise everybody to upgrade as soon as possible.


Thanks for the quick response!
  1660   Tue Feb 7 21:02:22 2006 Question Chris Warnerchristopher_warner@dcd.uscourts.govQuestionLinux email problems
When I select to get email notification on new logbook entries I receive this error when entering a new record.

Error sending Email via "xxx.xxx.xxx.xx": Syntax error, parameters in command "MAIL FROM: christopher_warner@xxx.gov SIZE=1985" unrecognized or missing

The user that sent the message was a test account that I set up. I entered the email address in the box provided and I am not sure what may be causing the difficulty.

Any thoughts as to what may be causing this?
  1667   Wed Feb 8 18:38:30 2006 Reply Chris Warnerchristopher_warner@dcd.uscourts.govQuestionLinux Re: email problems
The email address id correct. I am using an Elog Binary. I don't have the source code .

Chris Warner

Stefan Ritt wrote:

Chris Warner wrote:
Error sending Email via "xxx.xxx.xxx.xx": Syntax error, parameters in command "MAIL FROM: christopher_warner@xxx.gov SIZE=1985" unrecognized or missing


There are two possible reasons:

1) The email address "christopher_warner@xxx.gov" is invalid. Some SMTP server immediately complain about invalid email addresses and refuse to send any mail then. In that case just supply an existing email address or remove that test account.

2) The SMTP server does not like the "SIZE=xxx" option. This comes from a single line in elogd.c:

snprintf(str, strsize - 1, "MAIL FROM: %s SIZE=%d\r\n", from, strlen(text));

you could just go there and remove the " SIZE=%d", so that the line looks like:

snprintf(str, strsize - 1, "MAIL FROM: %s\r\n", from);
to see if that makes any difference.
ELOG V3.1.5-3fb85fa6