logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstrated via a crafted username to a Samba server.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2011-02-25T18:00:00

Updated: 2024-08-06T22:14:27.220Z

Reserved: 2011-02-14T00:00:00

Link: CVE-2011-1018

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-02-25T19:00:01.320

Modified: 2024-11-21T01:25:20.387

Link: CVE-2011-1018

cve-icon Redhat

Severity : Important

Publid Date: 2011-02-16T00:00:00Z

Links: CVE-2011-1018 - Bugzilla