CVE-2011-1550
- State
- Published
- Severity
- Not scored
- Published
- Mar 30, 2011
- Updated
- Sep 16, 2024
- Reserved
- Mar 30, 2011
Description
The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by directories for the (1) cobbler, (2) inn, (3) safte-monitor, and (4) uucp packages.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110304 CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110310 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110308 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110307 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110307 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110305 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110305 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110307 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110323 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110310 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110311 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110314 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110304 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110306 Re: CVE Request -- logrotate -- nine issuesmailing-list
- [oss-security] 20110305 Re: CVE Request -- logrotate -- nine issuesmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.