漏洞信息(CVE-2011-1155)

一、漏洞 CVE-2011-1155 基础信息

漏洞标题

N/A

来源：AIGC 神龙大模型

漏洞描述信息

Logrotate 3.7.9 和更早版本中的 writeState 函数可能会允许依赖于上下文的黑客通过 log 文件名中的 (1) \n (newline) 或 (2) \ (backslash) 字符造成服务拒绝(轮转故障)，例如，基于主机名或虚拟机名称自动构建的文件名示例。

来源：AIGC 神龙大模型

CVSS信息

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

来源：AIGC 神龙大模型

漏洞类别

N/A

来源：AIGC 神龙大模型

漏洞标题

N/A

来源：美国国家漏洞数据库 NVD

漏洞描述信息

The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.

来源：美国国家漏洞数据库 NVD

CVSS信息

N/A

来源：美国国家漏洞数据库 NVD

漏洞类别

N/A

来源：美国国家漏洞数据库 NVD

漏洞标题

Gentoo logrotate logrotate.c writeState函数拒绝服务漏洞

来源：中国国家信息安全漏洞库 CNNVD

漏洞描述信息

logrotate 3.7.9及之前版本的logrotate.c中的writeState函数中存在资源管理错误漏洞。上下文攻击者可以借助日志文件名称中的（1）“\n”（换行）或者（2）“\”（反斜杠），导致拒绝服务（循环中断）。该漏洞已经通过在主机名称或者虚拟机名称基础上自动创建的文件名称得到证明。

来源：中国国家信息安全漏洞库 CNNVD

CVSS信息

N/A

来源：中国国家信息安全漏洞库 CNNVD

漏洞类别

资源管理错误

来源：中国国家信息安全漏洞库 CNNVD

二、漏洞 CVE-2011-1155 的公开POC

#	POC 描述	源链接	神龙链接

三、漏洞 CVE-2011-1155 的情报信息

https://bugzilla.redhat.com/show_bug.cgi?id=680797 x_refsource_CONFIRM
http://secunia.com/advisories/43955 third-party-advisory x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2011/0872 vdb-entry x_refsource_VUPEN
http://www.vupen.com/english/advisories/2011/0791 vdb-entry x_refsource_VUPEN
http://www.vupen.com/english/advisories/2011/0961 vdb-entry x_refsource_VUPEN
http://www.redhat.com/support/errata/RHSA-2011-0407.html vendor-advisory x_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=MDVSA-2011:065 vendor-advisory x_refsource_MANDRIVA
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056992.html vendor-advisory x_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057845.html vendor-advisory x_refsource_FEDORA
http://openwall.com/lists/oss-security/2011/03/04/16 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/27 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/10/2 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/30 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/25 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/11/3 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/10/7 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/05/8 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/22 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/11/5 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/26 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/19 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/32 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/14/26 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/24 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/06/4 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/06/6 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/33 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/31 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/18 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/06/5 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/23/11 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/07/11 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/10/3 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/28 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/05/4 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/08/5 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/05/6 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/07/6 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/29 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/06/3 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/10/6 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/17 mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/07/5 mailing-list x_refsource_MLIST
https://nvd.nist.gov/vuln/detail/CVE-2011-1155

一、 漏洞 CVE-2011-1155 基础信息

漏洞标题

漏洞描述信息

CVSS信息

漏洞类别

漏洞标题

漏洞描述信息

CVSS信息

漏洞类别

漏洞标题

漏洞描述信息

CVSS信息

漏洞类别

二、漏洞 CVE-2011-1155 的公开POC

三、漏洞 CVE-2011-1155 的情报信息

一、漏洞 CVE-2011-1155 基础信息