NVD

Id
8480  
Name
CVE-2011-1550  
Description
The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate"s lack of support for untrusted directories, as demonstrated by directories for the (1) cobbler, (2) inn, (3) safte-monitor, and (4) uucp packages.  
Reject
 
CVSS Version
2  
CVSS Score
6.3  
Severity
Medium  
CVSS Base Score
6.3  
CVSS Impact Subscore
9.2  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-03-30  
Modified Date
2011-04-07  
Seq
2011-1550  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
48678 8480 CVE-2011-1550 [oss-security] 20110304 CVE Request -- logrotate -- nine issues  View
48679 8480 CVE-2011-1550 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48680 8480 CVE-2011-1550 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48681 8480 CVE-2011-1550 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48682 8480 CVE-2011-1550 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48683 8480 CVE-2011-1550 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48684 8480 CVE-2011-1550 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48685 8480 CVE-2011-1550 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48686 8480 CVE-2011-1550 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48687 8480 CVE-2011-1550 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48688 8480 CVE-2011-1550 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48689 8480 CVE-2011-1550 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48690 8480 CVE-2011-1550 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48691 8480 CVE-2011-1550 [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues  View
48692 8480 CVE-2011-1550 [oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues  View
48693 8480 CVE-2011-1550 [oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues  View
48694 8480 CVE-2011-1550 [oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues  View
48695 8480 CVE-2011-1550 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
48696 8480 CVE-2011-1550 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
48697 8480 CVE-2011-1550 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
48698 8480 CVE-2011-1550 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
48699 8480 CVE-2011-1550 [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues  View
48700 8480 CVE-2011-1550 [oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues  View
48701 8480 CVE-2011-1550 [oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues  View
48702 8480 CVE-2011-1550 [oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues  View
48703 8480 CVE-2011-1550 [oss-security] 20110308 Re: CVE Request -- logrotate -- nine issues  View
48704 8480 CVE-2011-1550 [oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues  View
48705 8480 CVE-2011-1550 [oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues  View
48706 8480 CVE-2011-1550 [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues  View
48707 8480 CVE-2011-1550 [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues  View
48708 8480 CVE-2011-1550 [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues  View
48709 8480 CVE-2011-1550 [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues  View
48710 8480 CVE-2011-1550 [oss-security] 20110314 Re: CVE Request -- logrotate -- nine issues  View
48711 8480 CVE-2011-1550 [oss-security] 20110323 Re: CVE Request -- logrotate -- nine issues  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34194 JVNDB-2011-004436 logrotate のデフォルト設定におけるシンボリックリンク攻撃を誘発する脆弱性 logrotate のデフォルト設定は、root 以外の書き込み権限が許可されているディレクトリトリ内でのファイル処理に root 権限を使用するため、シンボリックリンク攻撃およびハードリンク攻撃を誘発する脆弱性が存在します。 CVE-2011-1550 49457 CVE-2011-1550 8480 6.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004436.html 2011-03-30 2012-03-27 View