CVE-2006-6318

The show_elog_list function in elogd.c in elog 2.6.2 and earlier allows remote authenticated users to cause a denial of service (daemon crash) by attempting to access a logbook whose name begins with global, which results in a NULL pointer dereference. NOTE: some of these details are obtained from third party information.

Affected Software

Name	Vendor	Start Version	End Version
Elog_web_logbook	Stefan_ritt	*	2.6.2 (including)
Elog_web_logbook	Stefan_ritt	2.0.0 (including)	2.0.0 (including)
Elog_web_logbook	Stefan_ritt	2.0.1 (including)	2.0.1 (including)
Elog_web_logbook	Stefan_ritt	2.0.2 (including)	2.0.2 (including)
Elog_web_logbook	Stefan_ritt	2.0.3 (including)	2.0.3 (including)
Elog_web_logbook	Stefan_ritt	2.0.4 (including)	2.0.4 (including)
Elog_web_logbook	Stefan_ritt	2.0.5 (including)	2.0.5 (including)
Elog_web_logbook	Stefan_ritt	2.1.0 (including)	2.1.0 (including)
Elog_web_logbook	Stefan_ritt	2.1.1 (including)	2.1.1 (including)
Elog_web_logbook	Stefan_ritt	2.1.2 (including)	2.1.2 (including)
Elog_web_logbook	Stefan_ritt	2.1.3 (including)	2.1.3 (including)
Elog_web_logbook	Stefan_ritt	2.2.0 (including)	2.2.0 (including)
Elog_web_logbook	Stefan_ritt	2.2.1 (including)	2.2.1 (including)
Elog_web_logbook	Stefan_ritt	2.2.2 (including)	2.2.2 (including)
Elog_web_logbook	Stefan_ritt	2.2.3 (including)	2.2.3 (including)
Elog_web_logbook	Stefan_ritt	2.2.4 (including)	2.2.4 (including)
Elog_web_logbook	Stefan_ritt	2.4 (including)	2.4 (including)
Elog_web_logbook	Stefan_ritt	2.5 (including)	2.5 (including)
Elog_web_logbook	Stefan_ritt	2.5.6 (including)	2.5.6 (including)
Elog_web_logbook	Stefan_ritt	2.5.7 (including)	2.5.7 (including)
Elog_web_logbook	Stefan_ritt	2.6.0 (including)	2.6.0 (including)
Elog_web_logbook	Stefan_ritt	2.6.1 (including)	2.6.1 (including)
Elog	Ubuntu	dapper	*
Elog	Ubuntu	edgy	*
Elog	Ubuntu	feisty	*
Elog	Ubuntu	gutsy	*
Elog	Ubuntu	hardy	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-6318
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References