PT-2011-1188 · Gentoo Linux · Logrotate

Ludwig Nussel · Published 2011-03-30 · Updated 2012-06-25 · CVE-2011-1549

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions logrotate versions prior to 3.8.0

Description The issue concerns multiple vulnerabilities in the logrotate package that can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited locally. Specifically, the default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access. This allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, such as those under /var/log/ for packages.

Recommendations For versions prior to 3.8.0, update to version 3.8.0 or later to resolve the issue. As a temporary workaround, consider restricting write access to directories processed by logrotate to prevent local users from conducting symlink and hard link attacks.

Fix

Race Condition

Weakness Enumeration

CWE-264

CWE-362

Related Identifiers

BDU:2015-09654

CVE-2011-1549

Affected Products

Logrotate

References · 38

• https://bdu.fstec.ru/vul/2015-09654 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-1549 · Security Note
• http://openwall.com/lists/oss-security/2011/03/05/4 · Note
• http://openwall.com/lists/oss-security/2011/03/04/22 · Note
• http://openwall.com/lists/oss-security/2011/03/04/28 · Note
• http://openwall.com/lists/oss-security/2011/03/10/3 · Note
• http://openwall.com/lists/oss-security/2011/03/04/17 · Note
• http://openwall.com/lists/oss-security/2011/03/06/4 · Note
• http://openwall.com/lists/oss-security/2011/03/11/5 · Note
• http://openwall.com/lists/oss-security/2011/03/04/32 · Note
• http://openwall.com/lists/oss-security/2011/03/05/8 · Note
• http://openwall.com/lists/oss-security/2011/03/10/6 · Note
• http://openwall.com/lists/oss-security/2011/03/04/24 · Note
• http://openwall.com/lists/oss-security/2011/03/04/19 · Note
• http://openwall.com/lists/oss-security/2011/03/04/16 · Note