Fixes CVE-2011-1154, CVE-2011-1155 and CVE-2011-1098.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A shell command injection flaw was found in the way logrotate handled the shred directive. A specially crafted log file could cause logrotate to execute arbitrary commands with the privileges of the user running logrotate (root, by default). Note: The shred directive is not enabled by default. (CVE-2011-1154)

A race condition flaw was found in the way logrotate applied permissions when creating new log files. In some specific configurations, a local attacker could use this flaw to open new log files before logrotate applies the final permissions, possibly leading to the disclosure of sensitive information. (CVE-2011-1098)

An input sanitization flaw was found in logrotate. A log file with a specially crafted file name could cause logrotate to abort when attempting to process that file a subsequent time. (CVE-2011-1155)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has logrotate packages installed that are affected by multiple vulnerabilities:

  - Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local     users to read log data by opening a file before the intended permissions are in place. (CVE-2011-1098)

  - The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent     attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a     filename that is automatically constructed on the basis of a hostname or virtual machine name.
    (CVE-2011-1154)

  - The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent     attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash)     character in a log filename, as demonstrated by a filename that is automatically constructed on the basis     of a hostname or virtual machine name. (CVE-2011-1155)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for logrotate provides the following fixes :

dbg114-logrotate-4580 logrotate-4580 new_updateinfo The shred_file function in logrotate might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name (CVE-2011-1154) (bnc#679661)

dbg114-logrotate-4580 logrotate-4580 new_updateinfo Race condition in the createOutputFile function in logrotate allows local users to read log data by opening a file before the intended permissions are in place (CVE-2011-1098) (bnc#677336)

dbg114-logrotate-4580 logrotate-4580 new_updateinfo The writeState function in logrotate might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) n (newline) or (2) (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name (CVE-2011-1155) (bnc#679662)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
53363	Fedora 14 : logrotate-3.7.9-2.fc14 (2011-3739)	Nessus	Fedora Local Security Checks	2011/4/12	2021/1/11	medium
53199	Fedora 15 : logrotate-3.7.9-8.fc15 (2011-3758)	Nessus	Fedora Local Security Checks	2011/3/29	2021/1/11	medium
61004	Scientific Linux Security Update : logrotate on SL6.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
160771	NewStart CGSL CORE 5.05 / MAIN 5.05 : logrotate Multiple Vulnerabilities (NS-SA-2022-0037)	Nessus	NewStart CGSL Local Security Checks	2022/5/9	2022/5/9	medium
75942	openSUSE Security Update : logrotate (openSUSE-SU-2011:0536-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	medium

检测

插件搜索

medium

medium

medium

medium

medium