logrotate Debian Linux 'var/log/postgresql' Symlink Local Privilege Escalation Vulnerability
BID:47167
Info
logrotate Debian Linux 'var/log/postgresql' Symlink Local Privilege Escalation Vulnerability
| Bugtraq ID: | 47167 |
| Class: | Design Error |
| CVE: |
CVE-2011-1548 |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 05 2011 12:00AM |
| Updated: | Dec 21 2011 06:59PM |
| Credit: | Florian Zumbiehl |
| Vulnerable: |
Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 11.04 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.10 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 LTS Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 logrotate logrotate 3.7.9 logrotate logrotate 0 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Avaya 96x1 IP Deskphone 6 |
| Not Vulnerable: | |
Discussion
logrotate Debian Linux 'var/log/postgresql' Symlink Local Privilege Escalation Vulnerability
logrotate is prone to a local privilege-escalation vulnerability that occurs on Debian Linux operating systems.
Local attackers can exploit this issue to gain superuser privileges on affected computers.
logrotate is prone to a local privilege-escalation vulnerability that occurs on Debian Linux operating systems.
Local attackers can exploit this issue to gain superuser privileges on affected computers.
Exploit / POC
logrotate Debian Linux 'var/log/postgresql' Symlink Local Privilege Escalation Vulnerability
An attacker can use readily available commands to exploit the issue.
An attacker can use readily available commands to exploit the issue.
Solution / Fix
logrotate Debian Linux 'var/log/postgresql' Symlink Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
logrotate Debian Linux 'var/log/postgresql' Symlink Local Privilege Escalation Vulnerability
References:
References: