logwatch-7.3-9.AXS3

エラータID: AXSA:2011-82:01

Release date: 
Thursday, March 10, 2011 - 13:56
Subject: 
logwatch-7.3-9.AXS3
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

Logwatch is a customizable, pluggable log-monitoring system. It will go through your logs for a given period of time and make a report in the areas that you wish with the detail that you wish. Easy to use - works right out of the package on many systems.
Security issues fixed with this release:
CVE-2011-1018
logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstrated via a crafted username to a Samba server.

Solution: 

Update package.

CVEs: 
CVE-2011-1018
logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstrated via a crafted username to a Samba server.


Additional Info: 

N/A

Download: 

SRPMS
  1. logwatch-7.3-9.AXS3.src.rpm
    MD5: 89795c6e3c4fea17ba7e4557da2c63fa
    SHA-256: 7fe98e74a2d3105d7dd8b217ee993f7da1e5527d3874b11e592558b71c674d99
    Size: 247.88 kB

Asianux Server 3 for x86
  1. logwatch-7.3-9.AXS3.noarch.rpm
    MD5: a416f6620e57e468ea3983f34435bfae
    SHA-256: cf9420802c22ed685d40afe938d1c6f9217f9db0f1a2b28da734e593ed2d0ce2
    Size: 250.50 kB

Asianux Server 3 for x86_64
  1. logwatch-7.3-9.AXS3.noarch.rpm
    MD5: 85cc4afd2393189f595c9311136680e4
    SHA-256: f7b1021dd2bc95d958749c347c511096731f4260e54fee08d32358bd8ae99d46
    Size: 250.46 kB