PT-2025-2690 · Glog+3 · Glog+3
Günther Noack
+1
·
Published
2025-01-28
·
Updated
2025-11-25
·
CVE-2024-45339
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
glog (affected versions not specified)
Description
The issue arises when logs are written to a widely-writable directory, allowing an unprivileged attacker to predict a privileged process's log file path and create a symbolic link to a sensitive file in its place. When the privileged process runs, it follows the planted symlink and overwrites the sensitive file. To address this, glog now exits the program with a status code of 2 when it discovers that the configured log file already exists.
Recommendations
To resolve the issue, ensure that glog is configured to write logs to a directory that is not widely writable.
As a temporary workaround, consider restricting write access to the log directory to prevent unprivileged attackers from creating symbolic links to sensitive files.
Avoid using widely-writable directories for logging until the issue is fully addressed.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Red Os
Suse
Glog