CVE-2011-1550

N/A Unknown

Published: March 30, 2011 Modified: April 29, 2026

Description

The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by directories for the (1) cobbler, (2) inn, (3) safte-monitor, and (4) uucp packages.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://openwall.com/lists/oss-security/2011/03/04/16

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/17

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/18

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/19

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/22

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/24

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/25

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/26

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/27

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/28

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/29

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/30

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/31

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/32

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/33

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/05/4

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/05/6

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/05/8

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/06/3

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/06/4

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/06/5

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/06/6

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/07/11

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/07/5

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/07/6

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/08/5

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/10/2

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/10/3

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/10/6

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/10/7

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/11/3

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/11/5

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/14/26

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/23/11

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2011/03/04/16