Vulnerability in Gentoo Logrotate

CVE-2011-1548

The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's…

EPSS: 0.001 (18.6th percentile) — read the EPSS interpretation.

Affected products

Gentoo Logrotate
Debian Linux
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110304 CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110308 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)