PT-2002-1043 · Logwatch · Logwatch

Publicado 2002-03-28 · Atualizado 2016-10-18 · CVE-2002-0165

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LogWatch versions 2.5 LogWatch version 2.6

Description The issue allows local users to gain elevated privileges, potentially leading to a breach of confidentiality, integrity, and availability of protected information. This can be exploited locally.

Recommendations For LogWatch version 2.5, consider restricting access to sensitive areas of the system to minimize the risk of exploitation. For LogWatch version 2.6, restrict local user privileges to prevent potential elevation of privileges. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

BDU:2015-07960

CVE-2002-0165

Produtos afetados

Logwatch

Referências · 6

• http://marc.info/?l=bugtraq&m=101787227513000&w=2 · Nota
• https://rhn.redhat.com/errata/RHSA-2002-053.html · Nota
• https://bdu.fstec.ru/vul/2015-07960 · Nota de Segurança
• http://iss.net/security_center/static/8652.php · Nota
• http://list.kaybee.org/archives/logwatch-announce/2002-March/000003.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0165 · Nota de Segurança