CVE-2011-1549

N/A Unknown

Published: March 30, 2011 Modified: April 29, 2026

Description

The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by directories under /var/log/ for packages.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://openwall.com/lists/oss-security/2011/03/04/16

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/17

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/18

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/19

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/22

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/24

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/25

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/26

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/27

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/28

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/29

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/30

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/31

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/32

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/33

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/05/4

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/05/6

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/05/8

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/06/3

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/06/4

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/06/5

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/06/6

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/07/11

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/07/5

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/07/6

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/08/5

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/10/2

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/10/3

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/10/6

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/10/7

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/11/3

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/11/5

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/14/26

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/23/11

Source: cve@mitre.org

http://www.securityfocus.com/bid/47170

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/16