漏洞信息(CVE-2011-1154)

一、漏洞 CVE-2011-1154 基础信息

漏洞标题

N/A

来源：AIGC 神龙大模型

漏洞描述信息

logrotate 3.7.9 和更早版本中的shred_file函数可能允许基于主机名或虚拟机名的上下文无关攻击者通过日志文件名中的 shell 元字符执行任意命令，例如自动构建基于主机名或虚拟机名的filename。

来源：AIGC 神龙大模型

CVSS信息

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

来源：AIGC 神龙大模型

漏洞类别

N/A

来源：AIGC 神龙大模型

漏洞标题

N/A

来源：美国国家漏洞数据库 NVD

漏洞描述信息

The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.

来源：美国国家漏洞数据库 NVD

CVSS信息

N/A

来源：美国国家漏洞数据库 NVD

漏洞类别

N/A

来源：美国国家漏洞数据库 NVD

漏洞标题

Gentoo logrotate logrotate.c shred_file函数任意命令执行漏洞

来源：中国国家信息安全漏洞库 CNNVD

漏洞描述信息

logrotate 3.7.9及之前版本的logrotate.c中的shred_file函数中存在输入验证漏洞。上下文攻击者可以借助日志文件名称中的shell元字符，执行任意命令。该漏洞已经通过在主机名称或者虚拟机名称基础上自动创建的文件名称得到证明。

来源：中国国家信息安全漏洞库 CNNVD

CVSS信息

N/A

来源：中国国家信息安全漏洞库 CNNVD

漏洞类别

授权问题

来源：中国国家信息安全漏洞库 CNNVD

二、漏洞 CVE-2011-1154 的公开POC

#	POC 描述	源链接	神龙链接

三、漏洞 CVE-2011-1154 的情报信息

https://bugzilla.redhat.com/show_bug.cgi?id=680796 x_refsource_CONFIRM
http://secunia.com/advisories/43955 third-party-advisory x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2011/0872 vdb-entry x_refsource_VUPEN
http://www.vupen.com/english/advisories/2011/0791 vdb-entry x_refsource_VUPEN
http://www.vupen.com/english/advisories/2011/0961 vdb-entry x_refsource_VUPEN
http://www.redhat.com/support/errata/RHSA-2011-0407.html vendor-advisory x_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=MDVSA-2011:065 vendor-advisory x_refsource_MANDRIVA
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056992.html vendor-advisory x_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057845.html vendor-advisory x_refsource_FEDORA
http://openwall.com/lists/oss-security/2011/03/04/16 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/27 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/30 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/10/2 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/25 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/11/3 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/10/7 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/05/8 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/22 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/11/5 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/18 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/19 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/32 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/14/26 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/24 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/06/4 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/06/6 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/33 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/31 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/06/5 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/23/11 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/07/11 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/26 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/10/3 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/05/4 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/28 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/05/6 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/07/6 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/29 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/06/3 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/10/6 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/08/5 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/17 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/07/5 mailing-list x_refsource_MLIST
https://nvd.nist.gov/vuln/detail/CVE-2011-1154

一、 漏洞 CVE-2011-1154 基础信息

漏洞标题

漏洞描述信息

CVSS信息

漏洞类别

漏洞标题

漏洞描述信息

CVSS信息

漏洞类别

漏洞标题

漏洞描述信息

CVSS信息

漏洞类别

二、漏洞 CVE-2011-1154 的公开POC

三、漏洞 CVE-2011-1154 的情报信息

一、漏洞 CVE-2011-1154 基础信息