Local File Processing Vulnerability in Debian GNU/Linux Logrotate
CVE-2011-1548

Currently unrated

Key Information:

Vendor

Gentoo

Status
Logrotate
Vendor
CVE Published:
30 March 2011

What is CVE-2011-1548?

The default configuration of logrotate in Debian GNU/Linux grants root privileges to process log files within directories that allow non-root users to write. This design flaw exposes the system to symlink and hard link attacks, enabling local users to manipulate log files. As exemplified by PostgreSQL log files under /var/log/postgresql/, untrusted directories lack the adequate safeguards to prevent exploitation. Administrators should review and tighten permissions and configurations to mitigate risks associated with this vulnerability.

References

http://openwall.com/lists/oss-security/2011/03/04/19
mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/16
mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/25
mailing-listx_refsource_MLIST

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.