CVE-2006-5790
Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote...
Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) an entry with an attachment whose name contains format string specifiers (el_submit function), and possibly other vectors in the (2) receive_config, (3) show_rss_feed, (4) show_elog_list, (5) show_logbook_node, and (6) server_loop functions.
Exploit likelihood
What each source reports
NVD Score used
Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) an entry with an attachment whose name contains format string specifiers (el_submit function), and possibly other vectors in the (2) receive_config, (3) show_rss_feed, (4) show_elog_list, (5) show_logbook_node, and (6) server_loop functions.
- Record
CVE-2006-5790- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) an entry with an attachment whose name contains format string specifiers (el_submit function), and possibly other vectors in the (2) receive_config, (3) show_rss_feed, (4) show_elog_list, (5) show_logbook_node, and (6) server_loop functions.
- Record
CVE-2006-5790- Updated
- 2026-11-02
EUVDEUVD-2006-5774 No score
Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) an entry with an attachment whose name contains format string specifiers (el_submit function), and possibly other vectors in the (2) receive_config, (3) show_rss_feed, (4) show_elog_list, (5) show_logbook_node, and (6) server_loop functions.
- Record
EUVD-2006-5774- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hmhj-w425-prq4 No score
Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote...
Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) an entry with an attachment whose name contains format string specifiers (el_submit function), and possibly other vectors in the (2) receive_config, (3) show_rss_feed, (4) show_elog_list, (5) show_logbook_node, and (6) server_loop functions.
- Record
GHSA-hmhj-w425-prq4- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
elogDebian:3.1 From an advisory covering 4 CVEs |
before 2.5.7+r1558-4+sarge3, plus listed versions 2.5.7+r1558-32.5.7+r1558-4+sarge12.5.7+r1558-4+sarge2 |
2.5.7+r1558-4+sarge3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5790 is a high vulnerability (CVSS 7.5) in Stefan Ritt Elog Web Logbook, published November 7, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.07%, the 87th percentile. No source names a fixed version.
References
secunia.com/advisories/23580
debian.org/security/2006/dsa-1242
securityfocus.com/bid/20876
exchange.xforce.ibmcloud.com/vulnerabilities/29987
vupen.com/english/advisories/2006/4315
bugs.debian.org/cgi-bin/bugreport.cgi?bug=392016
nvd.nist.gov/vuln/detail/CVE-2006-5790
github.com/advisories/GHSA-hmhj-w425-prq4