header-logo
Suggest Exploit
vendor:
Logwatch
by:
SecurityFocus
7.5
CVSS
HIGH
Denial of Service
400
CWE
Product Name: Logwatch
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2005

Logwatch Denial of Service Vulnerability

Logwatch is prone to a denial of service vulnerability in the secure script. This issue may be exploited by a local attacker who can inject a malicious string into a log file, causing a denial of service condition. As a result, the utility may not detect subsequent malicious activity.

Mitigation:

Ensure that all log files are monitored and checked for malicious strings.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/13273/info

Logwatch is prone to a denial of vulnerability in the secure script.

This issue may be exploited by a local attacker who can inject a malicious string into a log file, causing a denial of service condition. As a result, the utility may not detect subsequent malicious activity. 

ogger -p authpriv.notice '+++ connection closed by localhost +++'

Navigation

Suggest Exploit

Services By CQR