CVE-2011-1155 in logrotateinfo

Zusammenfassung

von MITRE

The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservieren

03.03.2011

Veröffentlichung

30.03.2011

Moderieren

akzeptiert

Eintrag

VDB-56968

CPE

bereit

EPSS

0.00387

KEV

nein

Aktivitäten

very low

Quellen

Interested in the pricing of exploits?

See the underground prices here!