低危 logrotate 'writeState()'函数日志文件名本地拒绝服务漏洞

CVE编号

CVE-2011-1155

利用情况

暂无

补丁情况

官方补丁

披露时间

2011-03-31

漏洞描述

logrotate是一款日志文件管理工具。当执行'write state'操作时logrotate工具执行参数过滤存在一个拒绝服务缺陷，本地攻击者可以利用此缺陷通过特制日志文件名使后续的logrotate操作停止。

解决建议

用户可参考如下供应商提供的安全公告获得补丁信息：https://bugzilla.redhat.com/show_bug.cgi?id=680797

参考链接
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057845.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056992.html
http://openwall.com/lists/oss-security/2011/03/04/16
http://openwall.com/lists/oss-security/2011/03/04/17
http://openwall.com/lists/oss-security/2011/03/04/18
http://openwall.com/lists/oss-security/2011/03/04/19
http://openwall.com/lists/oss-security/2011/03/04/22
http://openwall.com/lists/oss-security/2011/03/04/24
http://openwall.com/lists/oss-security/2011/03/04/25
http://openwall.com/lists/oss-security/2011/03/04/26
http://openwall.com/lists/oss-security/2011/03/04/27
http://openwall.com/lists/oss-security/2011/03/04/28
http://openwall.com/lists/oss-security/2011/03/04/29
http://openwall.com/lists/oss-security/2011/03/04/30
http://openwall.com/lists/oss-security/2011/03/04/31
http://openwall.com/lists/oss-security/2011/03/04/32
http://openwall.com/lists/oss-security/2011/03/04/33
http://openwall.com/lists/oss-security/2011/03/05/4
http://openwall.com/lists/oss-security/2011/03/05/6
http://openwall.com/lists/oss-security/2011/03/05/8
http://openwall.com/lists/oss-security/2011/03/06/3
http://openwall.com/lists/oss-security/2011/03/06/4
http://openwall.com/lists/oss-security/2011/03/06/5
http://openwall.com/lists/oss-security/2011/03/06/6
http://openwall.com/lists/oss-security/2011/03/07/11
http://openwall.com/lists/oss-security/2011/03/07/5
http://openwall.com/lists/oss-security/2011/03/07/6
http://openwall.com/lists/oss-security/2011/03/08/5
http://openwall.com/lists/oss-security/2011/03/10/2
http://openwall.com/lists/oss-security/2011/03/10/3
http://openwall.com/lists/oss-security/2011/03/10/6
http://openwall.com/lists/oss-security/2011/03/10/7
http://openwall.com/lists/oss-security/2011/03/11/3
http://openwall.com/lists/oss-security/2011/03/11/5
http://openwall.com/lists/oss-security/2011/03/14/26
http://openwall.com/lists/oss-security/2011/03/23/11
http://secunia.com/advisories/43955
http://www.mandriva.com/security/advisories?name=MDVSA-2011:065
http://www.redhat.com/support/errata/RHSA-2011-0407.html
http://www.vupen.com/english/advisories/2011/0791
http://www.vupen.com/english/advisories/2011/0872
http://www.vupen.com/english/advisories/2011/0961
https://bugzilla.redhat.com/show_bug.cgi?id=680797

受影响软件情况

#	类型	厂商	产品	版本	影响面
1
	运行在以下环境
	应用	gentoo	logrotate	*		Up to (including) 3.7.9
	运行在以下环境
	应用	gentoo	logrotate	3.3	-
	运行在以下环境
	应用	gentoo	logrotate	3.5.9	-
	运行在以下环境
	应用	gentoo	logrotate	3.6.5	-
	运行在以下环境
	应用	gentoo	logrotate	3.7	-
	运行在以下环境
	应用	gentoo	logrotate	3.7.1	-
	运行在以下环境
	应用	gentoo	logrotate	3.7.2	-
	运行在以下环境
	应用	gentoo	logrotate	3.7.6	-
	运行在以下环境
	应用	gentoo	logrotate	3.7.7	-
	运行在以下环境
	应用	gentoo	logrotate	3.7.8	-
	运行在以下环境
	系统	debian_10	logrotate	*		Up to (excluding) 3.8.0-1
	运行在以下环境
	系统	debian_11	logrotate	*		Up to (excluding) 3.8.0-1
	运行在以下环境
	系统	debian_12	logrotate	*		Up to (excluding) 3.8.0-1
	运行在以下环境
	系统	debian_sid	logrotate	*		Up to (excluding) 3.8.0-1
	运行在以下环境
	系统	oracle_6	oraclelinux-release	*		Up to (excluding) 3.7.8-12.el6_0.1
	运行在以下环境
	系统	redhat_6	logrotate	*		Up to (excluding) 0:3.7.8-12.el6_0.1
	运行在以下环境
	系统	suse_12	logrotate	*		Up to (excluding) 3.8.7-3

阿里云评分 2.3

• 攻击路径 本地
• 攻击复杂度 困难
• 权限要求 普通权限
• 影响范围 有限影响
• EXP成熟度 未验证
• 补丁情况 官方补丁
• 数据保密性 无影响
• 数据完整性 无影响
• 服务器危害 无影响
• 全网数量 -

CWE-ID	漏洞类型
CWE-399	资源管理错误

Exp相关链接

- avd.aliyun.com