NVD

Id
8478  
Name
CVE-2011-1548  
Description
The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate"s lack of support for untrusted directories, as demonstrated by /var/log/postgresql/.  
Reject
 
CVSS Version
2  
CVSS Score
6.3  
Severity
Medium  
CVSS Base Score
6.3  
CVSS Impact Subscore
9.2  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-03-30  
Modified Date
2011-04-20  
Seq
2011-1548  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
48607 8478 CVE-2011-1548 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606544  View
48608 8478 CVE-2011-1548 [oss-security] 20110304 CVE Request -- logrotate -- nine issues  View
48609 8478 CVE-2011-1548 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48610 8478 CVE-2011-1548 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48611 8478 CVE-2011-1548 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48612 8478 CVE-2011-1548 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48613 8478 CVE-2011-1548 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48614 8478 CVE-2011-1548 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48615 8478 CVE-2011-1548 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48616 8478 CVE-2011-1548 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48617 8478 CVE-2011-1548 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48618 8478 CVE-2011-1548 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48619 8478 CVE-2011-1548 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48620 8478 CVE-2011-1548 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48621 8478 CVE-2011-1548 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48622 8478 CVE-2011-1548 [oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues  View
48623 8478 CVE-2011-1548 [oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues  View
48624 8478 CVE-2011-1548 [oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues  View
48625 8478 CVE-2011-1548 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
48626 8478 CVE-2011-1548 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
48627 8478 CVE-2011-1548 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
48628 8478 CVE-2011-1548 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
48629 8478 CVE-2011-1548 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
48630 8478 CVE-2011-1548 [oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues  View
48631 8478 CVE-2011-1548 [oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues  View
48632 8478 CVE-2011-1548 [oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues  View
48633 8478 CVE-2011-1548 [oss-security] 20110308 Re: CVE Request -- logrotate -- nine issues  View
48634 8478 CVE-2011-1548 [oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues  View
48635 8478 CVE-2011-1548 [oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues  View
48636 8478 CVE-2011-1548 [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues  View
48637 8478 CVE-2011-1548 [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues  View
48638 8478 CVE-2011-1548 [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues  View
48639 8478 CVE-2011-1548 [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues  View
48640 8478 CVE-2011-1548 [oss-security] 20110314 Re: CVE Request -- logrotate -- nine issues  View
48641 8478 CVE-2011-1548 [oss-security] 20110323 Re: CVE Request -- logrotate -- nine issues  View
48642 8478 CVE-2011-1548 47167  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34192 JVNDB-2011-004434 logrotate のデフォルト設定におけるシンボリックリンク攻撃を誘発する脆弱性 logrotate のデフォルト設定は、root 以外の書き込み権限が許可されているディレクトリトリ内でのファイル処理に root 権限を使用するため、シンボリックリンク攻撃およびハードリンク攻撃を誘発する脆弱性が存在します。 CVE-2011-1548 49455 CVE-2011-1548 8478 6.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004434.html 2011-03-30 2012-03-27 View