Red Hat Security AdvisoryRHSA-2011:0324
logwatch security update
Released 2011-03-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5.6.z server) logwatch-7.3-9.el5_6
- Red Hat Enterprise Linux Desktop (v. 6) logwatch-7.3.6-49.el6
- Red Hat Enterprise Linux HPC Node (v. 6) logwatch-7.3.6-49.el6
- Red Hat Enterprise Linux Server (v. 6) logwatch-7.3.6-49.el6
- Red Hat Enterprise Linux Workstation (v. 6) logwatch-7.3.6-49.el6
Fixes 1 record
Priority MEDIUM 61
logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstrated via a crafted username to a Samba server.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.18321 · Published 2011-02-25 · Fixed CWE-20
