Buffer overflow in Manageengine Eventlog Analyzer
CVE-2010-4840
Multiple buffer overflows in the Syslog server in ManageEngine EventLog Analyzer 6.1 allow remote attackers to cause a denial of service (SysEvttCol.exe process crash) or possibly execute arbitrary code via a long Syslog PRI message header to UDP port (1) 513 or (2) 514. Fixed in 7.2 Build 7020.
Vulnerability class: Buffer Overflow
EPSS: 0.022 (80.3th percentile) — read the EPSS interpretation.
Affected products
- Manageengine Eventlog_analyzer — versions 6.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC)