Root compromise through LogWatch 2.1.1

Release : March 27 2002 Author : Spybreak [email protected] Software : LogWatch Version : 2.1.1 Homepage : www.kaybee.org/kirk/html/linux.html Problems : A /tmp race condition leads to root --- INTRO --- LogWatch is a customizable log analysis system. LogWatch parses through your system's logs for...

LogWatch 2.1.1/2.5 - Insecure Temporary Directory Creation

source: https://www.securityfocus.com/bid/4374/info LogWatch is a freely available, open source script for monitoring log files. It may be used with the Linux and Unix Operating systems. Upon execution, LogWatch creates a directory in /tmp. This directory uses the name logwatch.$pid, where $pid i...