Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-1155

Опубликовано: 30 мар. 2011
Источник: nvd
CVSS2: 1.9
EPSS Низкий

Описание

The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gentoo:logrotate:*:*:*:*:*:*:*:*
Версия до 3.7.9 (включая)
cpe:2.3:a:gentoo:logrotate:3.3:r2:*:*:*:*:*:*
cpe:2.3:a:gentoo:logrotate:3.5.9:*:*:*:*:*:*:*
cpe:2.3:a:gentoo:logrotate:3.5.9:r1:*:*:*:*:*:*
cpe:2.3:a:gentoo:logrotate:3.6.5:*:*:*:*:*:*:*
cpe:2.3:a:gentoo:logrotate:3.6.5:r1:*:*:*:*:*:*
cpe:2.3:a:gentoo:logrotate:3.7:*:*:*:*:*:*:*
cpe:2.3:a:gentoo:logrotate:3.7.1:*:*:*:*:*:*:*
cpe:2.3:a:gentoo:logrotate:3.7.1:r1:*:*:*:*:*:*
cpe:2.3:a:gentoo:logrotate:3.7.1:r2:*:*:*:*:*:*
cpe:2.3:a:gentoo:logrotate:3.7.2:*:*:*:*:*:*:*
cpe:2.3:a:gentoo:logrotate:3.7.6:*:*:*:*:*:*:*
cpe:2.3:a:gentoo:logrotate:3.7.7:*:*:*:*:*:*:*
cpe:2.3:a:gentoo:logrotate:3.7.8:*:*:*:*:*:*:*

EPSS

Процентиль: 26%
0.00087
Низкий

1.9 Low

CVSS2

Дефекты

CWE-399

Связанные уязвимости

ubuntu
около 14 лет назад

The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.

redhat
больше 14 лет назад

The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.

debian
около 14 лет назад

The writeState function in logrotate.c in logrotate 3.7.9 and earlier ...

github
около 3 лет назад

The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.

oracle-oval
около 14 лет назад

ELSA-2011-0407: logrotate security update (MODERATE)

EPSS

Процентиль: 26%
0.00087
Низкий

1.9 Low

CVSS2

Дефекты

CWE-399