{"api_version":"1","generated_at":"2026-07-23T04:03:38+00:00","cve":"CVE-2011-1155","urls":{"html":"https://cve.report/CVE-2011-1155","api":"https://cve.report/api/cve/CVE-2011-1155.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-1155","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-1155"},"summary":{"title":"CVE-2011-1155","description":"The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \\n (newline) or (2) \\ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.","state":"PUBLISHED","assigner":"redhat","published_at":"2011-03-30 22:55:02","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-399","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"1.9","severity":"","vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","data":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://openwall.com/lists/oss-security/2011/03/06/3","name":"http://openwall.com/lists/oss-security/2011/03/06/3","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/10/2","name":"http://openwall.com/lists/oss-security/2011/03/10/2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/05/8","name":"http://openwall.com/lists/oss-security/2011/03/05/8","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/08/5","name":"http://openwall.com/lists/oss-security/2011/03/08/5","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/10/6","name":"http://openwall.com/lists/oss-security/2011/03/10/6","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0407.html","name":"http://www.redhat.com/support/errata/RHSA-2011-0407.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/43955","name":"http://secunia.com/advisories/43955","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Red Hat update for logrotate - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/04/24","name":"http://openwall.com/lists/oss-security/2011/03/04/24","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/04/27","name":"http://openwall.com/lists/oss-security/2011/03/04/27","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/04/22","name":"http://openwall.com/lists/oss-security/2011/03/04/22","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/04/28","name":"http://openwall.com/lists/oss-security/2011/03/04/28","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/04/32","name":"http://openwall.com/lists/oss-security/2011/03/04/32","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/04/31","name":"http://openwall.com/lists/oss-security/2011/03/04/31","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/06/4","name":"http://openwall.com/lists/oss-security/2011/03/06/4","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/04/18","name":"http://openwall.com/lists/oss-security/2011/03/04/18","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/11/5","name":"http://openwall.com/lists/oss-security/2011/03/11/5","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/04/17","name":"http://openwall.com/lists/oss-security/2011/03/04/17","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/05/4","name":"http://openwall.com/lists/oss-security/2011/03/05/4","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2011/0961","name":"http://www.vupen.com/english/advisories/2011/0961","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:065","name":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:065","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"mandriva.com","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://openwall.com/lists/oss-security/2011/03/10/3","name":"http://openwall.com/lists/oss-security/2011/03/10/3","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/23/11","name":"http://openwall.com/lists/oss-security/2011/03/23/11","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/05/6","name":"http://openwall.com/lists/oss-security/2011/03/05/6","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/11/3","name":"http://openwall.com/lists/oss-security/2011/03/11/3","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2011/0872","name":"http://www.vupen.com/english/advisories/2011/0872","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/06/6","name":"http://openwall.com/lists/oss-security/2011/03/06/6","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057845.html","name":"http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057845.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 14 Update: logrotate-3.7.9-2.fc14","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/14/26","name":"http://openwall.com/lists/oss-security/2011/03/14/26","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/07/6","name":"http://openwall.com/lists/oss-security/2011/03/07/6","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/10/7","name":"http://openwall.com/lists/oss-security/2011/03/10/7","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/06/5","name":"http://openwall.com/lists/oss-security/2011/03/06/5","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2011/0791","name":"http://www.vupen.com/english/advisories/2011/0791","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056992.html","name":"http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056992.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"[SECURITY] Fedora 15 Update: logrotate-3.7.9-8.fc15","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/07/5","name":"http://openwall.com/lists/oss-security/2011/03/07/5","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/07/11","name":"http://openwall.com/lists/oss-security/2011/03/07/11","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/04/19","name":"http://openwall.com/lists/oss-security/2011/03/04/19","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/04/16","name":"http://openwall.com/lists/oss-security/2011/03/04/16","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"oss-security - CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=680797","name":"https://bugzilla.redhat.com/show_bug.cgi?id=680797","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Bug 680797 – CVE-2011-1155 logrotate: DoS due improper escaping of file names within 'write state' action","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/04/26","name":"http://openwall.com/lists/oss-security/2011/03/04/26","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/04/25","name":"http://openwall.com/lists/oss-security/2011/03/04/25","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/04/30","name":"http://openwall.com/lists/oss-security/2011/03/04/30","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/04/33","name":"http://openwall.com/lists/oss-security/2011/03/04/33","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2011/03/04/29","name":"http://openwall.com/lists/oss-security/2011/03/04/29","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- logrotate -- nine issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-1155","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-1155","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"1155","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gentoo","cpe5":"logrotate","cpe6":"3.3","cpe7":"r2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1155","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gentoo","cpe5":"logrotate","cpe6":"3.5.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1155","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gentoo","cpe5":"logrotate","cpe6":"3.5.9","cpe7":"r1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1155","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gentoo","cpe5":"logrotate","cpe6":"3.6.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1155","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gentoo","cpe5":"logrotate","cpe6":"3.6.5","cpe7":"r1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1155","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gentoo","cpe5":"logrotate","cpe6":"3.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1155","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gentoo","cpe5":"logrotate","cpe6":"3.7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1155","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gentoo","cpe5":"logrotate","cpe6":"3.7.1","cpe7":"r1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1155","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gentoo","cpe5":"logrotate","cpe6":"3.7.1","cpe7":"r2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1155","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gentoo","cpe5":"logrotate","cpe6":"3.7.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1155","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gentoo","cpe5":"logrotate","cpe6":"3.7.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1155","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gentoo","cpe5":"logrotate","cpe6":"3.7.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1155","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gentoo","cpe5":"logrotate","cpe6":"3.7.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1155","vulnerable":"1","versionEndIncluding":"3.7.9","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gentoo","cpe5":"logrotate","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T22:14:27.789Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/04/19"},{"name":"[oss-security] 20110304 CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/04/16"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/04/25"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/04/30"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/04/26"},{"name":"[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/10/3"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/04/28"},{"name":"[oss-security] 20110308 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/08/5"},{"name":"43955","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/43955"},{"name":"[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/07/5"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/04/31"},{"name":"ADV-2011-0961","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2011/0961"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/04/17"},{"name":"[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/10/6"},{"name":"[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/06/3"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/04/29"},{"name":"[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/07/6"},{"name":"[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/05/6"},{"name":"FEDORA-2011-3739","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057845.html"},{"name":"[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/05/4"},{"name":"ADV-2011-0791","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2011/0791"},{"name":"MDVSA-2011:065","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:065"},{"name":"[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/07/11"},{"name":"[oss-security] 20110323 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/23/11"},{"name":"[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/06/5"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/04/18"},{"name":"FEDORA-2011-3758","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056992.html"},{"name":"[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/10/2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=680797"},{"name":"RHSA-2011:0407","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2011-0407.html"},{"name":"[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/11/3"},{"name":"[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/10/7"},{"name":"[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/05/8"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/04/22"},{"name":"[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/11/5"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/04/27"},{"name":"ADV-2011-0872","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2011/0872"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/04/32"},{"name":"[oss-security] 20110314 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/14/26"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/04/24"},{"name":"[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/06/4"},{"name":"[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/06/6"},{"name":"[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/03/04/33"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-03-04T00:00:00.000Z","descriptions":[{"lang":"en","value":"The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \\n (newline) or (2) \\ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2011-04-21T09:00:00.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/04/19"},{"name":"[oss-security] 20110304 CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/04/16"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/04/25"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/04/30"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/04/26"},{"name":"[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/10/3"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/04/28"},{"name":"[oss-security] 20110308 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/08/5"},{"name":"43955","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/43955"},{"name":"[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/07/5"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/04/31"},{"name":"ADV-2011-0961","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2011/0961"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/04/17"},{"name":"[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/10/6"},{"name":"[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/06/3"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/04/29"},{"name":"[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/07/6"},{"name":"[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/05/6"},{"name":"FEDORA-2011-3739","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057845.html"},{"name":"[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/05/4"},{"name":"ADV-2011-0791","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2011/0791"},{"name":"MDVSA-2011:065","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:065"},{"name":"[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/07/11"},{"name":"[oss-security] 20110323 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/23/11"},{"name":"[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/06/5"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/04/18"},{"name":"FEDORA-2011-3758","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056992.html"},{"name":"[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/10/2"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=680797"},{"name":"RHSA-2011:0407","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2011-0407.html"},{"name":"[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/11/3"},{"name":"[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/10/7"},{"name":"[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/05/8"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/04/22"},{"name":"[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/11/5"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/04/27"},{"name":"ADV-2011-0872","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2011/0872"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/04/32"},{"name":"[oss-security] 20110314 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/14/26"},{"name":"[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/04/24"},{"name":"[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/06/4"},{"name":"[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/06/6"},{"name":"[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/03/04/33"}]}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2011-1155","datePublished":"2011-03-30T22:00:00.000Z","dateReserved":"2011-03-03T00:00:00.000Z","dateUpdated":"2024-08-06T22:14:27.789Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-03-30 22:55:02","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-399","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:logrotate:*:*:*:*:*:*:*:*","versionEndIncluding":"3.7.9","matchCriteriaId":"CBB1E3AD-DFB4-4A8F-9753-0049B41BC155"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:logrotate:3.3:r2:*:*:*:*:*:*","matchCriteriaId":"9E2EEED0-4022-467B-9EBF-E6DA61B16B16"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:logrotate:3.5.9:*:*:*:*:*:*:*","matchCriteriaId":"2BE715C9-9C25-4998-90D3-556E53B177B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:logrotate:3.5.9:r1:*:*:*:*:*:*","matchCriteriaId":"812F126C-8855-468A-B723-24C8AEF325E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:logrotate:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"FAAE7BE5-701A-4A90-8163-5ABAC49121CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:logrotate:3.6.5:r1:*:*:*:*:*:*","matchCriteriaId":"A142B712-B06E-4E87-B7A8-DE12E94C25EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:logrotate:3.7:*:*:*:*:*:*:*","matchCriteriaId":"22668C8E-3C09-4DF2-91B2-C2F699AF8A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:logrotate:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"61673333-B183-4C09-9012-D78E05FE48EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:logrotate:3.7.1:r1:*:*:*:*:*:*","matchCriteriaId":"C54EBB10-0359-444F-9726-0406D6F8DD40"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:logrotate:3.7.1:r2:*:*:*:*:*:*","matchCriteriaId":"810F039B-E454-446B-94D2-97C67B814483"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:logrotate:3.7.2:*:*:*:*:*:*:*","matchCriteriaId":"EACBE194-176D-40BD-AA9E-4179D25A48EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:logrotate:3.7.6:*:*:*:*:*:*:*","matchCriteriaId":"7FA8A482-13E0-4B01-A32F-7AB46FED3ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:logrotate:3.7.7:*:*:*:*:*:*:*","matchCriteriaId":"47E3950C-3FBB-41D8-BBA7-FEAB540859A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:logrotate:3.7.8:*:*:*:*:*:*:*","matchCriteriaId":"BEB650B0-8CDB-4DE9-94CE-48E78A453262"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"1155","Ordinal":"1","Title":"CVE-2011-1155","CVE":"CVE-2011-1155","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"1155","Ordinal":"1","NoteData":"The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \\n (newline) or (2) \\ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.","Type":"Description","Title":"CVE-2011-1155"},{"CveYear":"2011","CveId":"1155","Ordinal":"2","NoteData":"2011-03-30","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"1155","Ordinal":"3","NoteData":"2011-04-21","Type":"Other","Title":"Modified"}]}}}