The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2011-134:01 advisory.

    The logrotate utility is designed to simplify the administration of log files on a system which generates     a lot of log files. Logrotate allows for the automatic rotation compression, removal and mailing of log     files. Logrotate can be set to handle a log file daily, weekly, monthly or when the log file gets to a     certain size. Normally, logrotate runs as a daily cron job.
    Install the logrotate package if you need a utility to deal with the log files on your system.
    Security issues fixed with this release:
    CVE-2011-1098     Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local     users to read log data by opening a file before the intended permissions are in place.
    CVE-2011-1154     The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent     attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a     filename that is automatically constructed on the basis of a hostname or virtual machine name.
    CVE-2011-1155     The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent     attackers to cause a denial of service (rotation outage) via a (1) n (newline) or (2)  (backslash)     character in a log filename, as demonstrated by a filename that is automatically constructed on the basis     of a hostname or virtual machine name.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for logrotate provides the following fixes :

dbg114-logrotate-4580 logrotate-4580 new_updateinfo The shred_file function in logrotate might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name (CVE-2011-1154) (bnc#679661)

dbg114-logrotate-4580 logrotate-4580 new_updateinfo Race condition in the createOutputFile function in logrotate allows local users to read log data by opening a file before the intended permissions are in place (CVE-2011-1098) (bnc#677336)

dbg114-logrotate-4580 logrotate-4580 new_updateinfo The writeState function in logrotate might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) n (newline) or (2) (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name (CVE-2011-1155) (bnc#679662)

A shell command injection flaw was found in the way logrotate handled the shred directive. A specially crafted log file could cause logrotate to execute arbitrary commands with the privileges of the user running logrotate (root, by default). Note: The shred directive is not enabled by default. (CVE-2011-1154)

A race condition flaw was found in the way logrotate applied permissions when creating new log files. In some specific configurations, a local attacker could use this flaw to open new log files before logrotate applies the final permissions, possibly leading to the disclosure of sensitive information. (CVE-2011-1098)

An input sanitization flaw was found in logrotate. A log file with a specially crafted file name could cause logrotate to abort when attempting to process that file a subsequent time. (CVE-2011-1155)

Fixes CVE-2011-1154, CVE-2011-1155 and CVE-2011-1098.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
284175	MiracleLinux 4 : logrotate-3.7.8-12.AXS4.1 (AXSA:2011-134:01)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	medium
75942	openSUSE Security Update : logrotate (openSUSE-SU-2011:0536-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	medium
61004	Scientific Linux Security Update : logrotate on SL6.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
53199	Fedora 15 : logrotate-3.7.9-8.fc15 (2011-3758)	Nessus	Fedora Local Security Checks	2011/3/29	2021/1/11	medium
53363	Fedora 14 : logrotate-3.7.9-2.fc14 (2011-3739)	Nessus	Fedora Local Security Checks	2011/4/12	2021/1/11	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium