Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
LogWatch不安全临时文件建立漏洞
Vulnerability Description
LogWatch是一款免费开放源代码监视日志文件程序，运行在Linux和Unix操作系统平台下。 LogWatch由于对临时目录和文件的建立缺少检查，可导致竞争条件攻击。 LogWatch在执行的时候会在/tmp目录下建立目录，目录使用logwatch.$pid名字命令，而$pid是执行脚本的进程ID，LogWatch在建立目录时没有检查目录是否存在或者目录内容是否存在，可导致本地用户使用可预测的进程ID建立logwatch.$pid目录，并在目录中放置恶意文件，就可以导致logwatch执行时恶意文件也
CVSS Information
N/A
Vulnerability Type
N/A