CVE-2011-1018
Fixed in a distro release EPSS 18%
logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstrated via a crafted username to a Samba server.
Products: logwatch
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | logwatch | 7.3.6.cvs20090906-2 |
| Debian 13 | logwatch | 7.3.6.cvs20090906-2 |
| Debian 14 | logwatch | 7.3.6.cvs20090906-2 |
| Debian 5.0 | logwatch | 7.3.6.cvs20080702-2lenny1 |
| Debian 6.0 | logwatch | 7.3.6.cvs20090906-1squeeze1 |
| Red Hat Enterprise Linux 5 | logwatch | 0:7.3-9.el5_6 |
| Red Hat Enterprise Linux 6 | logwatch | 0:7.3.6-49.el6 |
| openSUSE Tumbleweed | logwatch | 7.4.3-1.4 |