[{"CVE":"CVE-2011-1154","severity":"moderate","public_date":"2011-02-13T00:00:00Z","advisories":["RHSA-2011:0407"],"bugzilla":"680796","bugzilla_description":"CVE-2011-1154 logrotate: Shell command injection by using the shred configuration directive","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["logrotate-0:3.7.8-12.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1154.json"},{"CVE":"CVE-2011-1155","severity":"low","public_date":"2011-02-13T00:00:00Z","advisories":["RHSA-2011:0407"],"bugzilla":"680797","bugzilla_description":"CVE-2011-1155 logrotate: DoS due improper escaping of file names within 'write state' action","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["logrotate-0:3.7.8-12.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1155.json"},{"CVE":"CVE-2011-1098","severity":"low","public_date":"2011-02-13T00:00:00Z","advisories":["RHSA-2011:0407"],"bugzilla":"680798","bugzilla_description":"CVE-2011-1098 logrotate: TOCTOU race condition by creation of new files (between opening the file and moment, final permissions have been applied) [information disclosure]","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-367","affected_packages":["logrotate-0:3.7.8-12.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1098.json"}]