gentoo logrotate 3.7 vulnerabilities and exploits

(subscribe to this query)

Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and previous versions allows local users to read log data by opening a file before the intended permissions are in place.

Gentoo Logrotate 3.6.5 Gentoo Logrotate 3.7.8 Gentoo Logrotate 3.5.9 Gentoo Logrotate 3.7.6 Gentoo Logrotate 3.3 Gentoo Logrotate 3.7.2 Gentoo Logrotate 3.7 Gentoo Logrotate 3.7.1 Gentoo Logrotate Gentoo Logrotate 3.7.7

The shred_file function in logrotate.c in logrotate 3.7.9 and previous versions might allow context-dependent malicious users to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of ...

Gentoo Logrotate 3.7.1 Gentoo Logrotate 3.7.6 Gentoo Logrotate 3.5.9 Gentoo Logrotate 3.3 Gentoo Logrotate 3.6.5 Gentoo Logrotate 3.7.8 Gentoo Logrotate 3.7 Gentoo Logrotate Gentoo Logrotate 3.7.2 Gentoo Logrotate 3.7.7

The writeState function in logrotate.c in logrotate 3.7.9 and previous versions might allow context-dependent malicious users to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that...

Gentoo Logrotate 3.7.1 Gentoo Logrotate 3.6.5 Gentoo Logrotate 3.7.8 Gentoo Logrotate 3.7 Gentoo Logrotate 3.5.9 Gentoo Logrotate Gentoo Logrotate 3.7.6 Gentoo Logrotate 3.3 Gentoo Logrotate 3.7.2 Gentoo Logrotate 3.7.7

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook