PT-2002-1043 · Logwatch · Logwatch

Published 2002-03-28 · Updated 2016-10-18 · CVE-2002-0165

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LogWatch versions 2.5 LogWatch version 2.6

Description The issue allows local users to gain elevated privileges, potentially leading to a breach of confidentiality, integrity, and availability of protected information. This can be exploited locally.

Recommendations For LogWatch version 2.5, consider restricting access to sensitive areas of the system to minimize the risk of exploitation. For LogWatch version 2.6, restrict local user privileges to prevent potential elevation of privileges. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-07960

CVE-2002-0165

Affected Products

Logwatch

References · 6

• https://bdu.fstec.ru/vul/2015-07960 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2002-0165 · Security Note
• http://marc.info/?l=bugtraq&m=101787227513000&w=2 · Note
• https://rhn.redhat.com/errata/RHSA-2002-053.html · Note
• http://iss.net/security_center/static/8652.php · Note
• http://list.kaybee.org/archives/logwatch-announce/2002-March/000003.html · Note