Remote exploitation of a denial of service vulnerability in ELOG's elogd server allows attackers to crash the service. Versions 2.6.2 (SVN revision 1748) and below are affected.
198b2f0e24232dd25c7698cea3f1e16a3cb4e3422d58cdfb5df4c0060fdc91b6
Hesk versions 0.93 and prior are vulnerable to authentication bypass and path disclosure vulnerabilities caused due to improper validation of the HTTP header. This vulnerability can be exploited to bypass authentication mechanism, and also made to reveal system specific information.
2645a4a964c584ad640884d537dd3c2209e0231c8e3f12c7579589f38c74c645