102 matches found
Vulnerabilities of the Red Hat Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
The logwatch-2.6 package of the Red Hat Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...
The vulnerability of the Red Hat Enterprise Linux operating system, which allows a remote attacker to compromise the accessibility of protected information
The vulnerability of the logwatch-2.6 package of the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the logwatch-7.3.6 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the logwatch-7.3 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...
The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the logwatch-7.3 package for the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...
LogWatch 2.1.1/2.5 Insecure Temporary Directory Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4374/info LogWatch is a freely available, open source script for monitoring log files. It may be used with the Linux and Unix Operating systems. Upon execution, LogWatch creates a directory in /tmp. This directory uses th...
Logwatch 2.6 Secure Script Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13273/info Logwatch is prone to a denial of vulnerability in the secure script. This issue may be exploited by a local attacker who can inject a malicious string into a log file, causing a denial of service condition. As ...
openSUSE Security Update : logwatch (openSUSE-SU-2011:0242-1)
The update of logwatch improves the input validation. Before it was possible by an attacker to use special characters in a log-file to execute arbitrary commands. CVSS v2 Base Score: 8.5 AV:N/AC:M/Au:S/C:C/I:C/A:C %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...
Oracle Linux 6 : logwatch (ELSA-2011-0324)
The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-0324 advisory. 7.3.6-49 - Added fix for CVE-2011-1018: Privilege escalation due improper sanitization of special characters in log file names Resolves: 680304 Tenable has...
Scientific Linux Security Update : logwatch on SL5.x, SL6.x i386/x86_64
A flaw was found in the way Logwatch processed log files. If an attacker were able to create a log file with a malicious file name, it could result in arbitrary code execution with the privileges of the root user when that log file is analyzed by Logwatch. CVE-2011-1018 %NASLMINLEVEL 70300 C...
CentOS Update for logwatch CESA-2011:0324 centos5 x86_64
Check for the Version of logwatch OpenVAS Vulnerability Test CentOS Update for logwatch CESA-2011:0324 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
CentOS Update for logwatch CESA-2011:0324 centos5 x86_64
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
GLSA-201203-20 : Logwatch: Arbitrary code execution
The remote host is affected by the vulnerability described in GLSA-201203-20 Logwatch: Arbitrary code execution logwatch.pl does not properly sanitize log filenames against shell metacharacters before passing them to the 'system' function. Impact : A remote attacker could pass a specially crafted...
Gentoo Security Advisory GLSA 201203-20 (Logwatch)
The remote host is missing updates announced in advisory GLSA 201203-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 201203-20 (Logwatch)
The remote host is missing updates announced in advisory GLSA 201203-20. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
Logwatch: Arbitrary code execution
Background Logwatch analyzes and reports on system logs. Description logwatch.pl does not properly sanitize log filenames against shell metacharacters before passing them to the "system" function. Impact A remote attacker could pass a specially crafted log filename to Logwatch, possibly resulting...
CentOS Update for logwatch CESA-2011:0324 centos5 i386
Check for the Version of logwatch OpenVAS Vulnerability Test CentOS Update for logwatch CESA-2011:0324 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CentOS Update for logwatch CESA-2011:0324 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
openSUSE Security Update : logwatch (openSUSE-SU-2011:0242-1)
The update of logwatch improves the input validation. Before it was possible by an attacker to use special characters in a log-file to execute arbitrary commands. CVSS v2 Base Score: 8.5 AV:N/AC:M/Au:S/C:C/I:C/A:C %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...
CentOS 5 : logwatch (CESA-2011:0324)
An updated logwatch package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...