CVE-2011-1550: Gentoo logrotate默认配置后置链接漏洞

获取后续新漏洞提醒登录后订阅

一、漏洞 CVE-2011-1550 基础信息

漏洞信息

对漏洞内容有疑问？看看神龙的深度分析是否有帮助！

查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title

N/A

来源: 美国国家漏洞数据库 NVD

Vulnerability Description

The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by directories for the (1) cobbler, (2) inn, (3) safte-monitor, and (4) uucp packages.

来源: 美国国家漏洞数据库 NVD

CVSS Information

N/A

来源: 美国国家漏洞数据库 NVD

Vulnerability Type

N/A

来源: 美国国家漏洞数据库 NVD

Vulnerability Title

Gentoo logrotate默认配置后置链接漏洞

来源: 中国国家信息安全漏洞库 CNNVD

Vulnerability Description

logrotate是一款系统日志管理软件。基于SUSE openSUSE Factory的logrotate的默认配置使用根权限去处理目录中的文件（允许低权限用户对该文件执行写操作）。本地用户可以利用logrotate支持不可信路径的缺陷，执行符号链接和硬链接攻击。该漏洞已经通过（1）cobbler，（2）inn，（3）safte-monitor和（4）uucp包的目录得到证实。

来源: 中国国家信息安全漏洞库 CNNVD

CVSS Information

N/A

来源: 中国国家信息安全漏洞库 CNNVD

Vulnerability Type

N/A

来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商	产品	影响版本	CPE	订阅
-	n/a	n/a	-

二、漏洞 CVE-2011-1550 的公开POC

#	POC 描述	源链接	神龙链接

AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2011-1550 的情报信息

Please 登录 to view more intelligence information

http://openwall.com/lists/oss-security/2011/03/04/16mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/05/8mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/05/4mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/28mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/17mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/06/6mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/07/6mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/11/3mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/10/3mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/32mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/06/3mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/10/6mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/23/11mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/07/5mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/08/5mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/29mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/26mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/05/6mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/30mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/07/11mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/19mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/11/5mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/10/7mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/06/5mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/24mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/25mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/31mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/06/4mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/10/2mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/18mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/22mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/14/26mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/27mailing-listx_refsource_MLIST
https://nvd.nist.gov/vuln/detail/CVE-2011-1550

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2011-1550

暂无评论

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

一、漏洞 CVE-2011-1550 基础信息

漏洞信息

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

受影响产品

二、漏洞 CVE-2011-1550 的公开POC

三、漏洞 CVE-2011-1550 的情报信息

IV. Related Vulnerabilities

V. Comments for CVE-2011-1550

发表评论

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

一、 漏洞 CVE-2011-1550 基础信息

漏洞信息

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

受影响产品

二、漏洞 CVE-2011-1550 的公开POC

三、漏洞 CVE-2011-1550 的情报信息

IV. Related Vulnerabilities

V. Comments for CVE-2011-1550

发表评论

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

一、漏洞 CVE-2011-1550 基础信息