Buffer Overflow Vulnerability in ManageEngine EventLog Analyzer Syslog Server
CVE-2010-4840

Currently unrated

Key Information:

Vendor

Manageengine
Status
Eventlog Analyzer
Vendor
CVE Published:
27 September 2011

What is CVE-2010-4840?

The Syslog server in ManageEngine EventLog Analyzer version 6.1 is susceptible to multiple buffer overflow vulnerabilities. Attackers can leverage this weakness to initiate a denial of service by causing the SysEvttCol.exe process to crash or potentially execute arbitrary code. This is achieved by sending a long Syslog PRI message header to UDP ports 513 or 514. The vulnerability was addressed in version 7.2 Build 7020.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.solutionary.com/index/SERT/Vuln-Disclosures/Ma...
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.