CVE catalog
CVE-2011-1550
logrotate: CVE-2011-1550
- Severity
- Low
- Source
- [NVD] · [CVE record]
- EPSS
- 0.35% · Oct 25, 2026
The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by directories for the (1) cobbler, (2) inn, (3) safte-monitor, and (4) uucp packages.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | logrotate | sid | 3.22.0-1 | not affected |
| Debian | logrotate | forky | 3.22.0-1 | not affected |
| Debian | logrotate | trixie | 3.22.0-1 | not affected |
| Debian | logrotate | bookworm | 3.21.0-1 | not affected |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | logrotate | source | sid | Not affected | unimportant | Not reported | Not reported |
| Debian | logrotate | source | forky | Not affected | unimportant | Not reported | Not reported |
| Debian | logrotate | source | trixie | Not affected | unimportant | Not reported | Not reported |
| Debian | logrotate | source | bookworm | Not affected | unimportant | Not reported | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [logrotate]Not affected
Details (2)
3.21.0-1· amd64 · bookwormNot affected
dsa · logrotate · debian · bookworm
3.21.0-1· arm64 · bookwormNot affected
dsa · logrotate · debian · bookworm
Observed: