CVE-2011-1098

CVE-2011-1098 affects the logrotate utility (logrotate, versions up to 3.7.9). The root cause is a race condition in the createOutputFile function in logrotate.c that can allow local users to read log data before the intended permissions are applied. This is a local-information-disclosure issue; ...

CVE-2011-1548

CVE-2011-1548 concerns the logrotate utility on Debian-based systems, where the default configuration allows a non-root user to trigger symlink and hard-link attacks by exploiting logrotate’s handling of directories that are writable by non-root users. The underlying issue is the program processi...

CVE-2011-1155

CVE-2011-1155 affects logrotate up to version 3.7.9, where the writeState function in logrotate.c may allow context-dependent attackers to trigger a denial-of-service (rotation outage) by using a log filename containing a newline or a backslash. The MiracleLinux advisory and related Nessus entrie...

CVE-2011-1154

CVE-2011-1154 affects logrotate up to version 3.7.9. The vulnerability arises in the shred_file function in logrotate.c, where a log filename containing shell metacharacters can allow context‑dependent attackers to execute arbitrary commands. Impact is improvement of command execution risk in fil...

CVE-2011-1549

Summary (CVE-2011-1549) : The issue concerns the default logrotate configuration on Gentoo Linux, which runs with root privileges to process files in directories that can be written by non-root users. This enables local attackers to perform symlink and hard-link attacks by exploiting logrotate’s ...

CVE-2011-1550

The CVE concerns logrotate on SUSE openSUSE Factory configured by default to process files in directories that permit non-root write access, using root privileges. This enables local users to perform symlink and hard link attacks due to logrotate’s lack of support for untrusted directories. Concr...