PT-2005-1077 · Krx · Logwatch

Published 2005-04-19 · Updated 2008-09-05 · CVE-2005-1061

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions LogWatch versions prior to 2.6

Description The issue allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the secure file that are later used as part of a regular expression, which causes the parser to crash. This can lead to a denial of service, disrupting the availability of protected information. The exploitation of this issue can be performed remotely.

Recommendations For LogWatch versions prior to 2.6, update to version 2.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the secure file to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

BDU:2015-07051

CVE-2005-1061

Affected Products

Logwatch

References · 9

• 🔥 https://exploit-db.com/exploits/25465 · Exploit
• https://osv.dev/vulnerability/CVE-2005-1061 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-1061 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-364.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-1061 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07051 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2005-1061 · Security Note
• https://bugzilla.redhat.com/bugzilla-old/show_bug.cgi?id=137502 · Note
• https://rhn.redhat.com/errata/RHSA-2005-364.html · Note