LO
Product
Logrotate
6
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Logrotate to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-1098 | – | Mar 30 | Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions… Affected: through 3.7.9; 3.3; 3.5.9; 3.5.9; 3.6.5; 3.6.5; +8 more |
| CVE-2011-1154 | – | Mar 30 | The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log… Affected: through 3.7.9; 3.3; 3.5.9; 3.5.9; 3.6.5; 3.6.5; +8 more |
| CVE-2011-1155 | – | Mar 30 | The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline)… Affected: through 3.7.9; 3.3; 3.5.9; 3.5.9; 3.6.5; 3.6.5; +8 more |
| CVE-2011-1548 | – | Mar 30 | The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to… Affected: All versions, or not specified |
| CVE-2011-1549 | – | Mar 30 | The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct… Affected: All versions, or not specified |
| CVE-2011-1550 | – | Mar 30 | The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to… Affected: All versions, or not specified |
Showing 6