CVE-2006-0599: Stefan Ritt Elog Web Logbook

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

The (1) elog.c and (2) elogd.c components in elog before 2.5.7 r1558-4 generate different responses depending on whether or not a username is valid, which allows remote attackers to determine valid usernames.

Affected products

• Stefan Ritt Elog Web Logbook: version 2.0.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.0.5 only; …

Published 2006-02-13. Last modified 2026-06-16.