Vulnerability in Gentoo Linux

CVE-2011-1549

The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack…

EPSS: 0.001 (19.3th percentile) — read the EPSS interpretation.

Affected products

Gentoo Linux
Gentoo Logrotate
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110304 CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110308 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)
[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues (mailing-list, x_refsource_MLIST)