Unscored severity · published Mar 9, 2006
CVE-2006-0743
Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via…
–
CVSS
6.4%
EPSS
No
On KEV
Description
Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.4% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LO
Log4net · Apache
1.2.9_beta · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0743
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0743
Patch
http://issues.apache.org/jira/browse/LOG4NET-67
Patch
http://secunia.com/advisories/19241
Vendor Advisory
http://secunia.com/advisories/22932
www.novell.com
http://www.novell.com/linux/security/advisories/2006_26_sr.html
www.osvdb.org
http://www.osvdb.org/23905
www.securityfocus.com
http://www.securityfocus.com/bid/17095
More from Log4net
9.8
CVE-2018-1285
Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files
5.3
CVE-2026-105244
Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content
5.3
CVE-2026-105243
Apache log4net: Oversize EventLogAppender record silently discarded
5.3
CVE-2026-105242
Apache log4net: Request validation failure drops the event in the aspnet-request converter
5.3
CVE-2026-105241
Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch