CVE-2006-0599

Published: Feb 13, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The (1) elog.c and (2) elogd.c components in elog before 2.5.7 r1558-4 generate different responses depending on whether or not a username is valid, which allows remote attackers to determine valid usernames.

Affected (18)

Products: Stefan Ritt: Elog Web Logbook

Stefan Ritt

1 product

Elog Web Logbook

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Stefan Ritt Elog Web Logbook	Version 2.0.0
Stefan Ritt Elog Web Logbook	Version 2.0.1
Stefan Ritt Elog Web Logbook	Version 2.0.2
Stefan Ritt Elog Web Logbook	Version 2.0.3
Stefan Ritt Elog Web Logbook	Version 2.0.4
Stefan Ritt Elog Web Logbook	Version 2.0.5
Stefan Ritt Elog Web Logbook	Version 2.1.0
Stefan Ritt Elog Web Logbook	Version 2.1.1
Stefan Ritt Elog Web Logbook	Version 2.1.2
Stefan Ritt Elog Web Logbook	Version 2.1.3
Stefan Ritt Elog Web Logbook	Version 2.2.0
Stefan Ritt Elog Web Logbook	Version 2.2.1
Stefan Ritt Elog Web Logbook	Version 2.2.2
Stefan Ritt Elog Web Logbook	Version 2.2.3
Stefan Ritt Elog Web Logbook	Version 2.2.4
Stefan Ritt Elog Web Logbook	Version 2.4
Stefan Ritt Elog Web Logbook	Version 2.5.6
Stefan Ritt Elog Web Logbook	Version 2.5