Oval Definition:oval:org.mitre.oval:def:12846
Revision Date:2014-06-23Version:20
Title:DSA-2182-1 logwatch -- shell command injection
Description:Dominik George discovered that logwatch does not guard against shell meta-characters in crafted log file names. As a result, an attacker might be able to execute shell commands on the system running logwatch.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2011-1018
DSA-2182-1
Platform(s):Debian GNU/kFreeBSD 6.0
Debian GNU/Linux 5.0
Debian GNU/Linux 6.0
Product(s):logwatch
Definition Synopsis
  • Release section
  • Debian GNU/Linux 5.0 is installed
  • AND Installed architecture is all
  • AND logwatch DPKG is earlier than 7.3.6.cvs20080702-2lenny1
  • OR Release section
  • Debian 6.0 is installed
  • AND GNU/Linux or GNU/kFreeBSD kernel
  • Debian GNU/Linux is installed
  • OR Debian GNU/kFreeBSD is installed
  • AND Installed architecture is all
  • AND logwatch DPKG is earlier than 7.3.6.cvs20090906-1squeeze1
    • BACK