CVE-2006-5790

CVE-2006-5790 describes multiple format string vulnerabilities in ELOG 2.6.2 and earlier, specifically within the elogd.c component, affecting the stefan_ritt elog_web_logbook product. An unauthenticated remote attacker can exploit these flaws, primarily through an attachment name containing format string specifiers, to cause a denial of service (crash) and potentially execute arbitrary code. With a CVSS score of 7.5, this vulnerability is considered high severity due to its network-based attack vector, low attack complexity, and potential for partial impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.