NVD

Id
8123  
Name
CVE-2011-1154  
Description
The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-03-30  
Modified Date
2011-04-20  
Seq
2011-1154  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
46519 8123 CVE-2011-1154 FEDORA-2011-3739  View
46520 8123 CVE-2011-1154 FEDORA-2011-3758  View
46521 8123 CVE-2011-1154 [oss-security] 20110304 CVE Request -- logrotate -- nine issues  View
46522 8123 CVE-2011-1154 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
46523 8123 CVE-2011-1154 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
46524 8123 CVE-2011-1154 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
46525 8123 CVE-2011-1154 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
46526 8123 CVE-2011-1154 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
46527 8123 CVE-2011-1154 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
46528 8123 CVE-2011-1154 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
46529 8123 CVE-2011-1154 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
46530 8123 CVE-2011-1154 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
46531 8123 CVE-2011-1154 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
46532 8123 CVE-2011-1154 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
46533 8123 CVE-2011-1154 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
46534 8123 CVE-2011-1154 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
46535 8123 CVE-2011-1154 [oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues  View
46536 8123 CVE-2011-1154 [oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues  View
46537 8123 CVE-2011-1154 [oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues  View
46538 8123 CVE-2011-1154 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
46539 8123 CVE-2011-1154 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
46540 8123 CVE-2011-1154 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
46541 8123 CVE-2011-1154 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
46542 8123 CVE-2011-1154 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
46543 8123 CVE-2011-1154 [oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues  View
46544 8123 CVE-2011-1154 [oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues  View
46545 8123 CVE-2011-1154 [oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues  View
46546 8123 CVE-2011-1154 [oss-security] 20110308 Re: CVE Request -- logrotate -- nine issues  View
46547 8123 CVE-2011-1154 [oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues  View
46548 8123 CVE-2011-1154 [oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues  View
46549 8123 CVE-2011-1154 [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues  View
46550 8123 CVE-2011-1154 [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues  View
46551 8123 CVE-2011-1154 [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues  View
46552 8123 CVE-2011-1154 [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues  View
46553 8123 CVE-2011-1154 [oss-security] 20110314 Re: CVE Request -- logrotate -- nine issues  View
46554 8123 CVE-2011-1154 [oss-security] 20110323 Re: CVE Request -- logrotate -- nine issues  View
46555 8123 CVE-2011-1154 MDVSA-2011:065  View
46556 8123 CVE-2011-1154 RHSA-2011:0407  View
46557 8123 CVE-2011-1154 ADV-2011-0791  View
46558 8123 CVE-2011-1154 ADV-2011-0872  View
46559 8123 CVE-2011-1154 ADV-2011-0961  View
46560 8123 CVE-2011-1154 https://bugzilla.redhat.com/show_bug.cgi?id=680796  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31200 JVNDB-2011-001440 logrotate の shred_file 関数における任意のコードを実行される脆弱性 logrotate の logrotate.c 内にある shred_file 関数には、任意のコードを実行される脆弱性が存在します。 CVE-2011-1154 49061 CVE-2011-1154 8123 6.9 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001440.html 2011-03-30 2011-04-27 View