CVE-2011-1018
EPSS 21.5%logwatch - remote code execution
發布日:2011/2/25修改日:2026/4/28
描述
logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstrated via a crafted username to a Samba server.
受影響套件(2)
- Debian/logwatchfrom 0, < 7.3.6.cvs20090906-2
- Debian/logwatchfrom 0, < 7.3.6.cvs20080702-2lenny1