PT-2011-1188 · Gentoo Linux · Logrotate

Ludwig Nussel · Publicado 2011-03-30 · Atualizado 2012-06-25 · CVE-2011-1549

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions logrotate versions prior to 3.8.0

Description The issue concerns multiple vulnerabilities in the logrotate package that can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited locally. Specifically, the default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access. This allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, such as those under /var/log/ for packages.

Recommendations For versions prior to 3.8.0, update to version 3.8.0 or later to resolve the issue. As a temporary workaround, consider restricting write access to directories processed by logrotate to prevent local users from conducting symlink and hard link attacks.

Correção

Race Condition

Enumeração de Fraquezas

CWE-264

CWE-362

Identificadores relacionados

BDU:2015-09654

CVE-2011-1549

Produtos afetados

Logrotate

Referências · 38

• http://openwall.com/lists/oss-security/2011/03/05/4 · Nota
• http://openwall.com/lists/oss-security/2011/03/04/22 · Nota
• http://openwall.com/lists/oss-security/2011/03/04/28 · Nota
• http://openwall.com/lists/oss-security/2011/03/10/3 · Nota
• http://openwall.com/lists/oss-security/2011/03/04/17 · Nota
• http://openwall.com/lists/oss-security/2011/03/06/4 · Nota
• http://openwall.com/lists/oss-security/2011/03/11/5 · Nota
• http://openwall.com/lists/oss-security/2011/03/04/32 · Nota
• http://openwall.com/lists/oss-security/2011/03/05/8 · Nota
• http://openwall.com/lists/oss-security/2011/03/10/6 · Nota
• http://openwall.com/lists/oss-security/2011/03/04/24 · Nota
• http://openwall.com/lists/oss-security/2011/03/04/19 · Nota
• http://openwall.com/lists/oss-security/2011/03/04/16 · Nota
• http://openwall.com/lists/oss-security/2011/03/07/5 · Nota
• http://securityfocus.com/bid/47170 · Nota