CVE-2011-1548

The default configuration of logrotate on Debian GNU/Linux uses root
privileges to process files in directories that permit non-root write
access, which allows local users to conduct symlink and hard link attacks
by leveraging logrotate’s lack of support for untrusted directories, as
demonstrated by /var/log/postgresql/.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606544&gt;
• <https://bugzilla.redhat.com/show_bug.cgi?id=680799&gt;

Notes