Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple buffer overflows in the Syslog server in ManageEngine EventLog Analyzer 6.1 allow remote attackers to cause a denial of service (SysEvttCol.exe process crash) or possibly execute arbitrary code via a long Syslog PRI message header to UDP port (1) 513 or (2) 514. Fixed in 7.2 Build 7020.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ZOHO ManageEngine EventLog Analyzer Syslog 缓冲区错误漏洞
Vulnerability Description
ZOHO ManageEngine EventLog Analyzer是美国卓豪（ZOHO）公司的一套系统、事件日志分析软件。该软件能够对全网范围内的主机、服务器、网络设备以及各种应用服务系统等产生的日志，进行全面收集和细致分析。 ZOHO ManageEngine EventLog Analyzer 6.1版本中的Syslog服务器存在缓冲区错误漏洞。远程攻击者可以借助到UDP端口（1）513或者（2）514的超长Syslog PRI消息头导致拒绝服务（SysEvttCol.exe进程崩溃）或者可能执行
CVSS Information
N/A
Vulnerability Type
N/A