Vulnerability in Stefan Ritt Elog Web Logbook
CVE-2006-0599
The (1) elog.c and (2) elogd.c components in elog before 2.5.7 r1558-4 generate different responses depending on whether or not a username is valid, which allows remote attackers to determine valid usernames.
EPSS: 0.015 (72.2th percentile) — read the EPSS interpretation.
Affected products
- Stefan_ritt Elog_web_logbook — versions 2.0.0, 2.0.1, 2.0.2
- N/a — versions n/a
References
- security@debian.org (vdb-entry, x_refsource_BID)
- security@debian.org (vdb-entry, x_refsource_XF)
- security@debian.org (x_refsource_MISC)
- security@debian.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- security@debian.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)
- security@debian.org (x_refsource_MISC)