QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2011-1155

Back to search

CVE-2011-1155

Published: Mar 30, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.

VendorProductVersions

n/a

n/a

affected
n/a

References

43955
third-party-advisory
x_refsource_SECUNIA
ADV-2011-0961
vdb-entry
x_refsource_VUPEN
FEDORA-2011-3739
vendor-advisory
x_refsource_FEDORA
ADV-2011-0791
vdb-entry
x_refsource_VUPEN
MDVSA-2011:065
vendor-advisory
x_refsource_MANDRIVA
FEDORA-2011-3758
vendor-advisory
x_refsource_FEDORA
RHSA-2011:0407
vendor-advisory
x_refsource_REDHAT
ADV-2011-0872
vdb-entry
x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now