Search vulnerabilities

Results 4

Export CSV
CVE-2005-1061

security flaw

The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the secure file that are later used as part of a regular expression, which causes the parser to crash, aka "logwatch log processing regular expression DoS."

CVSS 2.0 · 5.0 Medium EPSS 3.1% KEV · Not listed
Vendors
CVE-2011-1018

logwatch: Privilege escalation due improper sanitization of special characters in log file names

logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstrated via a crafted username to a Samba server.

CVSS 2.0 · 10.0 Critical EPSS 18.3% KEV · Not listed
Vendors