cvelistv5 - cve-2011-1098

CVE-2011-1098 (GCVE-0-2011-1098)

Vulnerability from cvelistv5

Published

2011-03-30 22:00

Modified

2024-08-06 22:14

Severity ?

CWE

Summary

Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place.

References

URL

Tags

	http://openwall.com/lists/oss-security/2011/03/04/19	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/04/16	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/04/25	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/04/30	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/04/26	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/10/3	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/04/28	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/08/5	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/43955	third-party-advisory, x_refsource_SECUNIA
	http://openwall.com/lists/oss-security/2011/03/07/5	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/04/31	mailing-list, x_refsource_MLIST
	http://www.vupen.com/english/advisories/2011/0961	vdb-entry, x_refsource_VUPEN
	http://openwall.com/lists/oss-security/2011/03/04/17	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/10/6	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/06/3	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/04/29	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/07/6	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/05/6	mailing-list, x_refsource_MLIST
	http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057845.html	vendor-advisory, x_refsource_FEDORA
	http://openwall.com/lists/oss-security/2011/03/05/4	mailing-list, x_refsource_MLIST
	http://www.vupen.com/english/advisories/2011/0791	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2011:065	vendor-advisory, x_refsource_MANDRIVA
	http://openwall.com/lists/oss-security/2011/03/07/11	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/23/11	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/06/5	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=680798	x_refsource_CONFIRM
	http://openwall.com/lists/oss-security/2011/03/04/18	mailing-list, x_refsource_MLIST
	http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056992.html	vendor-advisory, x_refsource_FEDORA
	http://openwall.com/lists/oss-security/2011/03/10/2	mailing-list, x_refsource_MLIST
	http://www.redhat.com/support/errata/RHSA-2011-0407.html	vendor-advisory, x_refsource_REDHAT
	http://openwall.com/lists/oss-security/2011/03/11/3	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/10/7	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/05/8	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/04/22	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/11/5	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/04/27	mailing-list, x_refsource_MLIST
	http://www.vupen.com/english/advisories/2011/0872	vdb-entry, x_refsource_VUPEN
	http://openwall.com/lists/oss-security/2011/03/04/32	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/14/26	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/04/24	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/06/4	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/06/6	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/03/04/33	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:14:27.645Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/04/19"
          },
          {
            "name": "[oss-security] 20110304 CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/04/16"
          },
          {
            "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/04/25"
          },
          {
            "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/04/30"
          },
          {
            "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/04/26"
          },
          {
            "name": "[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/10/3"
          },
          {
            "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/04/28"
          },
          {
            "name": "[oss-security] 20110308 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/08/5"
          },
          {
            "name": "43955",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/43955"
          },
          {
            "name": "[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/07/5"
          },
          {
            "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/04/31"
          },
          {
            "name": "ADV-2011-0961",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0961"
          },
          {
            "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/04/17"
          },
          {
            "name": "[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/10/6"
          },
          {
            "name": "[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/06/3"
          },
          {
            "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/04/29"
          },
          {
            "name": "[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/07/6"
          },
          {
            "name": "[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/05/6"
          },
          {
            "name": "FEDORA-2011-3739",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057845.html"
          },
          {
            "name": "[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/05/4"
          },
          {
            "name": "ADV-2011-0791",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0791"
          },
          {
            "name": "MDVSA-2011:065",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:065"
          },
          {
            "name": "[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/07/11"
          },
          {
            "name": "[oss-security] 20110323 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/23/11"
          },
          {
            "name": "[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/06/5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=680798"
          },
          {
            "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/04/18"
          },
          {
            "name": "FEDORA-2011-3758",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056992.html"
          },
          {
            "name": "[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/10/2"
          },
          {
            "name": "RHSA-2011:0407",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0407.html"
          },
          {
            "name": "[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/11/3"
          },
          {
            "name": "[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/10/7"
          },
          {
            "name": "[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/05/8"
          },
          {
            "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/04/22"
          },
          {
            "name": "[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/11/5"
          },
          {
            "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/04/27"
          },
          {
            "name": "ADV-2011-0872",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0872"
          },
          {
            "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/04/32"
          },
          {
            "name": "[oss-security] 20110314 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/14/26"
          },
          {
            "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/04/24"
          },
          {
            "name": "[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/06/4"
          },
          {
            "name": "[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/06/6"
          },
          {
            "name": "[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/04/33"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-03-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2011-04-21T09:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/04/19"
        },
        {
          "name": "[oss-security] 20110304 CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/04/16"
        },
        {
          "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/04/25"
        },
        {
          "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/04/30"
        },
        {
          "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/04/26"
        },
        {
          "name": "[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/10/3"
        },
        {
          "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/04/28"
        },
        {
          "name": "[oss-security] 20110308 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/08/5"
        },
        {
          "name": "43955",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/43955"
        },
        {
          "name": "[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/07/5"
        },
        {
          "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/04/31"
        },
        {
          "name": "ADV-2011-0961",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0961"
        },
        {
          "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/04/17"
        },
        {
          "name": "[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/10/6"
        },
        {
          "name": "[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/06/3"
        },
        {
          "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/04/29"
        },
        {
          "name": "[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/07/6"
        },
        {
          "name": "[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/05/6"
        },
        {
          "name": "FEDORA-2011-3739",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057845.html"
        },
        {
          "name": "[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/05/4"
        },
        {
          "name": "ADV-2011-0791",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0791"
        },
        {
          "name": "MDVSA-2011:065",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:065"
        },
        {
          "name": "[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/07/11"
        },
        {
          "name": "[oss-security] 20110323 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/23/11"
        },
        {
          "name": "[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/06/5"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=680798"
        },
        {
          "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/04/18"
        },
        {
          "name": "FEDORA-2011-3758",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056992.html"
        },
        {
          "name": "[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/10/2"
        },
        {
          "name": "RHSA-2011:0407",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0407.html"
        },
        {
          "name": "[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/11/3"
        },
        {
          "name": "[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/10/7"
        },
        {
          "name": "[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/05/8"
        },
        {
          "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/04/22"
        },
        {
          "name": "[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/11/5"
        },
        {
          "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/04/27"
        },
        {
          "name": "ADV-2011-0872",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0872"
        },
        {
          "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/04/32"
        },
        {
          "name": "[oss-security] 20110314 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/14/26"
        },
        {
          "name": "[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/04/24"
        },
        {
          "name": "[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/06/4"
        },
        {
          "name": "[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/06/6"
        },
        {
          "name": "[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/04/33"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-1098",
    "datePublished": "2011-03-30T22:00:00.000Z",
    "dateReserved": "2011-02-24T00:00:00.000Z",
    "dateUpdated": "2024-08-06T22:14:27.645Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CERTA-2011-AVI-189

Vulnerability from certfr_avis

Plusieurs vulnérabilités pouvant conduire à un déni de service, une exécution de code arbitraire et une atteinte à la confidentialité des données ont été découvertes dans logrotate.

Description

Plusieurs vulnérabilités ont été corrigées dans logrotate. La première permet à une personne malintentionnée d'exécuter du code arbitraire sous l'identité du propriétaire du processus logrotate (root, par défaut) (CVE-2011-1154). La deuxième rend possible le déclenchement d'un déni de service (CVE-2011-1098). La troisième permet à un utilisateur malintentionné de porter atteinte à la confidentialité des données (CVE-2011-1155).

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Red Hat	Red Hat Enterprise Linux	Red Hat Enterprise Linux HPC Node v.6 ;
Red Hat	Red Hat Enterprise Linux Server	Red Hat Enterprise Linux Server v.6 ;
Red Hat	Red Hat Enterprise Linux	Red Hat Enterprise Linux Workstation v.6.
Red Hat	Red Hat Enterprise Linux	Red Hat Enterprise Linux Desktop v.6 ;

References

Title

Publication Time

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted