CVE-2011-1154

2011-03-3000:00:00

ubuntu.com

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.001

Percentile

29.8%

JSON

The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might
allow context-dependent attackers to execute arbitrary commands via shell
metacharacters in a log filename, as demonstrated by a filename that is
automatically constructed on the basis of a hostname or virtual machine
name.

Bugs

<https://bugzilla.redhat.com/show_bug.cgi?id=680796>

Notes

Author	Note
mdeslaur	issue #6 shred option was introduced in logrotate 3.7.5

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchlogrotate< 3.7.8-4ubuntu2.2UNKNOWN
ubuntu10.10noarchlogrotate< 3.7.8-6ubuntu1.1UNKNOWN
ubuntu11.04noarchlogrotate< 3.7.8-6ubuntu3.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	logrotate	< 3.7.8-4ubuntu2.2	UNKNOWN
ubuntu	10.10	noarch	logrotate	< 3.7.8-6ubuntu1.1	UNKNOWN
ubuntu	11.04	noarch	logrotate	< 3.7.8-6ubuntu3.1	UNKNOWN