logwatch shell characters vulnerability
Published:		03.03.2011
Source:		BUGTRAQ
SecurityVulns ID:		11482
Type:		local
Level:		5/10
Description:		Shell characters vulnerability on filenames.

CVE:

CVE-2011-1018 (logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstrated via a crafted username to a Samba server.)

Original document

UBUNTU, [USN-1078-1] Logwatch vulnerability (03.03.2011)

Discuss:

Read or add your comments to this news (0 comments)