logrotate Local Privilege Escalation Vulnerability
BID:45551
Info
logrotate Local Privilege Escalation Vulnerability
| Bugtraq ID: | 45551 |
| Class: | Race Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 22 2010 12:00AM |
| Updated: | Dec 22 2010 12:00AM |
| Credit: | Florian Zumbiehl |
| Vulnerable: |
logrotate logrotate 3.7.9 |
| Not Vulnerable: | |
Discussion
logrotate Local Privilege Escalation Vulnerability
logrotate is prone to a local privilege-escalation vulnerability.
Local attacker may be able to perform symbolic-link attacks to change the ownership and permissions of arbitrary files. This may aid in the complete compromise of the system.
logrotate 3.7.9 is vulnerable; other versions may also be affected.
logrotate is prone to a local privilege-escalation vulnerability.
Local attacker may be able to perform symbolic-link attacks to change the ownership and permissions of arbitrary files. This may aid in the complete compromise of the system.
logrotate 3.7.9 is vulnerable; other versions may also be affected.
Exploit / POC
logrotate Local Privilege Escalation Vulnerability
Attackers require local interactive access to exploit this issue.
Attackers require local interactive access to exploit this issue.
Solution / Fix
logrotate Local Privilege Escalation Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
logrotate Local Privilege Escalation Vulnerability
References:
References:
- logrotate Product Page (logrotate)
- logrotate: Creation of files has race condition that could allow unintended file (Florian Zumbiehl)
- privilege escalation and potential data loss in logrotate (Florian Zumbiehl)