NVD

Id
8479  
Name
CVE-2011-1549  
Description
The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate"s lack of support for untrusted directories, as demonstrated by directories under /var/log/ for packages.  
Reject
 
CVSS Version
2  
CVSS Score
6.3  
Severity
Medium  
CVSS Base Score
6.3  
CVSS Impact Subscore
9.2  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-03-30  
Modified Date
2011-04-20  
Seq
2011-1549  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
48643 8479 CVE-2011-1549 [oss-security] 20110304 CVE Request -- logrotate -- nine issues  View
48644 8479 CVE-2011-1549 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48645 8479 CVE-2011-1549 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48646 8479 CVE-2011-1549 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48647 8479 CVE-2011-1549 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48648 8479 CVE-2011-1549 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48649 8479 CVE-2011-1549 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48650 8479 CVE-2011-1549 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48651 8479 CVE-2011-1549 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48652 8479 CVE-2011-1549 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48653 8479 CVE-2011-1549 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48654 8479 CVE-2011-1549 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48655 8479 CVE-2011-1549 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48656 8479 CVE-2011-1549 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48657 8479 CVE-2011-1549 [oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues  View
48658 8479 CVE-2011-1549 [oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues  View
48659 8479 CVE-2011-1549 [oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues  View
48660 8479 CVE-2011-1549 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
48661 8479 CVE-2011-1549 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
48662 8479 CVE-2011-1549 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
48663 8479 CVE-2011-1549 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
48664 8479 CVE-2011-1549 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
48665 8479 CVE-2011-1549 [oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues  View
48666 8479 CVE-2011-1549 [oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues  View
48667 8479 CVE-2011-1549 [oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues  View
48668 8479 CVE-2011-1549 [oss-security] 20110308 Re: CVE Request -- logrotate -- nine issues  View
48669 8479 CVE-2011-1549 [oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues  View
48670 8479 CVE-2011-1549 [oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues  View
48671 8479 CVE-2011-1549 [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues  View
48672 8479 CVE-2011-1549 [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues  View
48673 8479 CVE-2011-1549 [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues  View
48674 8479 CVE-2011-1549 [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues  View
48675 8479 CVE-2011-1549 [oss-security] 20110314 Re: CVE Request -- logrotate -- nine issues  View
48676 8479 CVE-2011-1549 [oss-security] 20110323 Re: CVE Request -- logrotate -- nine issues  View
48677 8479 CVE-2011-1549 47170  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34193 JVNDB-2011-004435 logrotate のデフォルト設定におけるシンボリックリンク攻撃を誘発する脆弱性 logrotate のデフォルト設定は、root 以外の書き込み権限が許可されているディレクトリトリ内でのファイル処理に root 権限を使用するため、シンボリックリンク攻撃およびハードリンク攻撃を誘発する脆弱性が存在します。 CVE-2011-1549 49456 CVE-2011-1549 8479 6.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004435.html 2011-03-30 2012-03-27 View