Lucene search

MitreCVE-2011-1549

HistoryMar 30, 2011 - 10:55 p.m.

CVE-2011-1549

2011-03-3022:55:02

CWE-264

mitre

web.nvd.nist.gov

gentoo linux

logrotate

cve-2011-1549

symlink attacks

hard link attacks

nvd

privilege escalation

security vulnerability

logrotate configuration

CVSS2

6.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

Percentile

10.1%

JSON

The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate’s lack of support for untrusted directories, as demonstrated by directories under /var/log/ for packages.

Affected configurations

Nvd

Node

gentoologrotate

AND

gentoolinux

VendorProductVersionCPE
gentoologrotate*cpe:2.3:a:gentoo:logrotate:*:*:*:*:*:*:*:*
gentoolinux*cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gentoo	logrotate	*	cpe:2.3:a:gentoo:logrotate::::::::
gentoo	linux	*	cpe:2.3:o:gentoo:linux::::::::

References

openwall.com/lists/oss-security/2011/03/04/16

openwall.com/lists/oss-security/2011/03/04/17

openwall.com/lists/oss-security/2011/03/04/18

openwall.com/lists/oss-security/2011/03/04/19

openwall.com/lists/oss-security/2011/03/04/22

openwall.com/lists/oss-security/2011/03/04/24

openwall.com/lists/oss-security/2011/03/04/25

openwall.com/lists/oss-security/2011/03/04/26

openwall.com/lists/oss-security/2011/03/04/27

openwall.com/lists/oss-security/2011/03/04/28

openwall.com/lists/oss-security/2011/03/04/29

openwall.com/lists/oss-security/2011/03/04/30

openwall.com/lists/oss-security/2011/03/04/31

openwall.com/lists/oss-security/2011/03/04/32

openwall.com/lists/oss-security/2011/03/04/33

openwall.com/lists/oss-security/2011/03/05/4

openwall.com/lists/oss-security/2011/03/05/6

openwall.com/lists/oss-security/2011/03/05/8

openwall.com/lists/oss-security/2011/03/06/3

openwall.com/lists/oss-security/2011/03/06/4

openwall.com/lists/oss-security/2011/03/06/5

openwall.com/lists/oss-security/2011/03/06/6

openwall.com/lists/oss-security/2011/03/07/11

openwall.com/lists/oss-security/2011/03/07/5

openwall.com/lists/oss-security/2011/03/07/6

openwall.com/lists/oss-security/2011/03/08/5

openwall.com/lists/oss-security/2011/03/10/2

openwall.com/lists/oss-security/2011/03/10/3

openwall.com/lists/oss-security/2011/03/10/6

openwall.com/lists/oss-security/2011/03/10/7

openwall.com/lists/oss-security/2011/03/11/3

openwall.com/lists/oss-security/2011/03/11/5

openwall.com/lists/oss-security/2011/03/14/26

openwall.com/lists/oss-security/2011/03/23/11

www.securityfocus.com/bid/47170

CVSS2

6.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

Percentile

10.1%

JSON

Related for CVE-2011-1549