Published: 30/03/2011 Updated: 21/04/2011

CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4

VMScore: 614

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Subscribe to Gentoo

The shred_file function in logrotate.c in logrotate 3.7.9 and previous versions might allow context-dependent malicious users to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gentoo logrotate 3.7.1
gentoo logrotate 3.7.6
gentoo logrotate 3.5.9
gentoo logrotate 3.3
gentoo logrotate 3.6.5
gentoo logrotate 3.7.8
gentoo logrotate 3.7
gentoo logrotate
gentoo logrotate 3.7.2
gentoo logrotate 3.7.7

An attacker could cause logrotate to run programs, stop working, or read and write arbitrary files ...

CWE-20 http://openwall.com/lists/oss-security/2011/03/10/3 http://openwall.com/lists/oss-security/2011/03/06/4 http://openwall.com/lists/oss-security/2011/03/07/6 http://openwall.com/lists/oss-security/2011/03/05/4 http://openwall.com/lists/oss-security/2011/03/04/16 http://openwall.com/lists/oss-security/2011/03/04/18 http://openwall.com/lists/oss-security/2011/03/04/26 http://openwall.com/lists/oss-security/2011/03/06/5 http://openwall.com/lists/oss-security/2011/03/10/7 http://openwall.com/lists/oss-security/2011/03/04/27 http://openwall.com/lists/oss-security/2011/03/04/29 http://openwall.com/lists/oss-security/2011/03/05/8 http://openwall.com/lists/oss-security/2011/03/11/3 http://openwall.com/lists/oss-security/2011/03/07/11 http://openwall.com/lists/oss-security/2011/03/06/3 http://openwall.com/lists/oss-security/2011/03/04/17 http://openwall.com/lists/oss-security/2011/03/04/33 http://openwall.com/lists/oss-security/2011/03/04/19 http://openwall.com/lists/oss-security/2011/03/14/26 http://openwall.com/lists/oss-security/2011/03/04/25 http://openwall.com/lists/oss-security/2011/03/11/5 http://openwall.com/lists/oss-security/2011/03/08/5 http://openwall.com/lists/oss-security/2011/03/04/31 http://openwall.com/lists/oss-security/2011/03/06/6 http://openwall.com/lists/oss-security/2011/03/10/6 http://www.vupen.com/english/advisories/2011/0791 http://openwall.com/lists/oss-security/2011/03/04/30 http://openwall.com/lists/oss-security/2011/03/04/28 http://openwall.com/lists/oss-security/2011/03/04/24 http://openwall.com/lists/oss-security/2011/03/04/32 http://openwall.com/lists/oss-security/2011/03/07/5 http://openwall.com/lists/oss-security/2011/03/04/22 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056992.html http://openwall.com/lists/oss-security/2011/03/23/11 https://bugzilla.redhat.com/show_bug.cgi?id=680796 http://openwall.com/lists/oss-security/2011/03/05/6 http://openwall.com/lists/oss-security/2011/03/10/2 http://secunia.com/advisories/43955 http://www.vupen.com/english/advisories/2011/0961 http://www.redhat.com/support/errata/RHSA-2011-0407.html http://www.vupen.com/english/advisories/2011/0872 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057845.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:065 https://usn.ubuntu.com/1172-1/https://nvd.nist.gov

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook