CVE-2011-1154

🗓️ 30 Mar 2011 00:00:00Reported by ubuntu.comType

The "shred_file" function in logrotate 3.7.9 and earlier allows attackers to execute arbitrary commands via shell metacharacters in a log filename

Reporter	Title	Published	Views	Family All 56
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Gentoo Linux operating system, which allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
CVE	CVE-2011-1154	30 Mar 201122:00	–	cve
Cvelist	CVE-2011-1154	30 Mar 201122:00	–	cvelist
Debian CVE	CVE-2011-1154	30 Mar 201122:00	–	debiancve
Oracle linux	logrotate security update	31 Mar 201100:00	–	oraclelinux
EUVD	EUVD-2011-1167	7 Oct 202500:30	–	euvd
F5 Networks	K16870: logrotate vulnerability CVE-2011-1154	21 Feb 202318:52	–	f5
F5 Networks	SOL16870 - logrotate vulnerability CVE-2011-1154	7 Jul 201500:00	–	f5

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	10.04	any	logrotate	3.7.8-4ubuntu2.2	logrotate_3.7.8-4ubuntu2.2_any.deb
Ubuntu	10.10	any	logrotate	3.7.8-6ubuntu1.1	logrotate_3.7.8-6ubuntu1.1_any.deb
Ubuntu	11.04	any	logrotate	3.7.8-6ubuntu3.1	logrotate_3.7.8-6ubuntu3.1_any.deb

Source	Link
openwall	www.openwall.com/lists/oss-security/2011/03/04/16
ubuntu	www.ubuntu.com/security/notices/USN-1172-1
cve	www.cve.org/CVERecord

24 Jul 2024 15:57Current

6.1Medium risk

Vulners AI Score6.1

CVSS 26.9

EPSS0.00051