CVE-2011-1549

EPSS 0.06% · P19 Updated Feb 21, 2026

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2011-1549

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by directories under /var/log/ for packages.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Gentoo logrotate默认配置后置链接漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

logrotate是一款系统日志管理软件。基于Gentoo Linux的logrotate的默认配置使用根权限去处理目录中的文件（允许低权限用户对该文件执行写操作）。本地用户可以利用logrotate支持不可信路径的缺陷，执行符号链接和硬链接攻击。该漏洞已经通过包的/var/log/下的目录得到证实。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2011-1549

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2011-1549

请登录查看更多情报信息。

http://www.securityfocus.com/bid/47170vdb-entryx_refsource_BID
http://openwall.com/lists/oss-security/2011/03/04/16mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/05/8mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/28mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/17mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/06/6mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/07/6mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/11/3mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/10/3mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/32mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/06/3mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/10/6mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/23/11mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/07/5mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/08/5mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/29mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/26mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/05/6mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/25mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/27mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/14/26mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/22mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/18mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/10/2mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/06/4mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/31mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/05/4mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/24mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/06/5mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/10/7mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/11/5mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/19mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/07/11mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/04/30mailing-listx_refsource_MLIST
https://nvd.nist.gov/vuln/detail/CVE-2011-1549

Same Patch Batch · n/a · 2011-03-30 · 9 CVEs total

CVE-2009-5064		GNU C Library 权限许可和访问控制漏洞
CVE-2011-1097		Samba rsync缓冲区错误漏洞
CVE-2011-1098		logrotate 竞争条件问题漏洞
CVE-2011-1154		Gentoo logrotate logrotate.c shred_file函数任意命令执行漏洞
CVE-2011-1155		Gentoo logrotate logrotate.c writeState函数拒绝服务漏洞
CVE-2011-1548		Gentoo logrotate默认配置后置链接漏洞
CVE-2011-1550		Gentoo logrotate默认配置后置链接漏洞
CVE-2011-1551		Novell SUSE openSUSE Factory特权提升漏洞

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2011-1549

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2011-1549

I. Basic Information for CVE-2011-1549

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2011-1549

III. Intelligence Information for CVE-2011-1549

Same Patch Batch · n/a · 2011-03-30 · 9 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2011-1549

Leave a comment