CVE-2008-0445: Medium severity elog vulnerability

Published Jan 24, 2008

Updated

The replaceinlineimg function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows remote attackers to cause a denial of service (infinite loop) via crafted logbook entries. NOTE: some of these details are obtained from third party information.

Affected Software

68 affected components

ELOG ELOG=1.0.0

ELOG ELOG=1.0.1

ELOG ELOG=1.0.2

ELOG ELOG=1.0.3

ELOG ELOG=1.0.4

ELOG ELOG=1.0.5

ELOG ELOG=1.1.0

ELOG ELOG=1.1.1

ELOG ELOG=1.1.2

ELOG ELOG=1.1.3

ELOG ELOG=1.2.0

ELOG ELOG=1.2.1

ELOG ELOG=1.2.2

ELOG ELOG=1.2.3

ELOG ELOG=1.2.4

ELOG ELOG=1.2.5

ELOG ELOG=1.2.6

ELOG ELOG=1.3.0

ELOG ELOG=1.3.1

ELOG ELOG=1.3.2

ELOG ELOG=1.3.3

ELOG ELOG=1.3.4

ELOG ELOG=1.3.5

ELOG ELOG=1.3.6

ELOG ELOG=2.0.0

ELOG ELOG=2.0.1

ELOG ELOG=2.0.2

ELOG ELOG=2.0.3

ELOG ELOG=2.0.4

ELOG ELOG=2.0.5

ELOG ELOG=2.1.0

ELOG ELOG=2.1.1

ELOG ELOG=2.1.2

ELOG ELOG=2.1.3

ELOG ELOG=2.2.0

ELOG ELOG=2.2.1

ELOG ELOG=2.2.2

ELOG ELOG=2.2.3

ELOG ELOG=2.2.4

ELOG ELOG=2.2.5

ELOG ELOG=2.3.0

ELOG ELOG=2.3.1

ELOG ELOG=2.3.2

ELOG ELOG=2.3.3

ELOG ELOG=2.3.4

ELOG ELOG=2.3.5

ELOG ELOG=2.3.6

ELOG ELOG=2.3.7

ELOG ELOG=2.3.8

ELOG ELOG=2.3.9

ELOG ELOG=2.4.0

ELOG ELOG=2.4.1

ELOG ELOG=2.5.0

ELOG ELOG=2.5.1

ELOG ELOG=2.5.2

ELOG ELOG=2.5.3

ELOG ELOG=2.5.4

ELOG ELOG=2.5.5

ELOG ELOG=2.5.6

ELOG ELOG=2.5.7

ELOG ELOG=2.5.8

ELOG ELOG=2.5.9

ELOG ELOG=2.6.0

ELOG ELOG=2.6.1

ELOG ELOG=2.6.2

ELOG ELOG=2.6.3

ELOG ELOG=2.6.4

ELOG ELOG=2.6.5

Remediation

Patch Available

http://www.securityfocus.com/bid/27399

Event History

Jan 24, 2008

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-0445?

CVE-2008-0445 has a severity rating that indicates it can lead to a denial of service due to an infinite loop in the replace_inline_img function.

How do I fix CVE-2008-0445?

To fix CVE-2008-0445, upgrade to ELOG versions 2.7.1 or later, where the vulnerability has been addressed.

What versions are affected by CVE-2008-0445?

CVE-2008-0445 affects ELOG versions 1.0.0 through 2.7.0.

What type of attack does CVE-2008-0445 involve?

CVE-2008-0445 involves a denial of service attack where crafted logbook entries can cause the application to enter an infinite loop.

Is remote exploitation possible with CVE-2008-0445?

Yes, CVE-2008-0445 allows remote attackers to exploit the vulnerability without physical access to the system.