CVE-2011-1550

Published: Mar 30, 2011Modified: Apr 29, 2026

6.3

Vector

AV:L/AC:M/Au:N/C:N/I:C/A:C

Exploitability: 3.4 / Impact: 9.2

Source: NVD

Description

The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by directories for the (1) cobbler, (2) inn, (3) safte-monitor, and (4) uucp packages.

Affected (1)

Products: Gentoo: Logrotate

Gentoo

1 product

Logrotate

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Gentoo Logrotate	All versions

Running on/with	Platform Versions
Novell Opensuse Factory	All versions

Related CWEs

CWE-264

References (68)

http://openwall.com/lists/oss-security/2011/03/04/16

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/17

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/18

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/19

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/22

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/24

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/25

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/26

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/27

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/28

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/29

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/30

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/31

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/32

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/33

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/05/4

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/05/6

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/05/8

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/06/3

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/06/4

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/06/5

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/06/6

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/07/11

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/07/5

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/07/6

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/08/5

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/10/2

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/10/3

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/10/6

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/10/7

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/11/3

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/11/5

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/14/26

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/23/11

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/16