medium5.0Public exploit code
CVE-2005-1061
The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the secure file that a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Logwatch 2.6 Secure Script - Denial of Service2005-04-20 · dos · linux · Verified
Impact
The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the secure file that are later used as part of a regular expression, which causes the parser to crash, aka "logwatch log processing regular expression DoS."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Logwatch | Logwatch | Version 2.6.2 |
| Redhat | Enterprise Linux | Version 2.1 |
| Redhat | Linux Advanced Workstation | Version 2.1 |