CVE-2011-1548

Published: Mar 30, 2011Modified: Apr 29, 2026

6.3

Vector

AV:L/AC:M/Au:N/C:N/I:C/A:C

Exploitability: 3.4 / Impact: 9.2

Source: NVD

Description

The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by /var/log/postgresql/.

Affected (1)

Products: Gentoo: Logrotate

Gentoo

1 product

Logrotate

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Gentoo Logrotate	All versions

Running on/with	Platform Versions
Debian Linux	All versions

Related CWEs

CWE-264

References (72)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606544

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/16

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/17

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/18

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/19

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/22

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/24

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/25

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/26

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/27

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/28

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/29

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/30

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/31

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/32

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/33

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/05/4

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/05/6

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/05/8

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/06/3

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/06/4

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/06/5

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/06/6

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/07/11

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/07/5

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/07/6

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/08/5

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/10/2

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/10/3

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/10/6

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/10/7

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/11/3

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/11/5

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/14/26

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/23/11

Source: cve@mitre.org

http://www.securityfocus.com/bid/47167

Source: cve@mitre.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606544