PT-2005-1077 · Krx · Logwatch

Publicado 2005-04-19 · Atualizado 2008-09-05 · CVE-2005-1061

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions LogWatch versions prior to 2.6

Description The issue allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the secure file that are later used as part of a regular expression, which causes the parser to crash. This can lead to a denial of service, disrupting the availability of protected information. The exploitation of this issue can be performed remotely.

Recommendations For LogWatch versions prior to 2.6, update to version 2.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the secure file to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

BDU:2015-07051

CVE-2005-1061

Produtos afetados

Logwatch

Referências · 9

• 🔥 https://exploit-db.com/exploits/25465 · Exploit
• https://osv.dev/vulnerability/CVE-2005-1061 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-1061 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2005-364.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-1061 · Aviso do Fabricante
• https://bugzilla.redhat.com/bugzilla-old/show_bug.cgi?id=137502 · Nota
• https://bdu.fstec.ru/vul/2015-07051 · Nota de Segurança
• https://rhn.redhat.com/errata/RHSA-2005-364.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1061 · Nota de Segurança