CVE-2011-1550

no score yetEPSS 0.4%

gentoo logrotate: no CVSS score yet. EPSS 0.4% chance of exploitation in the next 30 days.

The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by directories for the (1) cobbler, (2) inn, (3) safte-monitor, and (4) uucp packages.

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2011-03-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

gentoo:logrotate

References

http://openwall.com/lists/oss-security/2011/03/04/16
http://openwall.com/lists/oss-security/2011/03/04/17
http://openwall.com/lists/oss-security/2011/03/04/18
http://openwall.com/lists/oss-security/2011/03/04/19
http://openwall.com/lists/oss-security/2011/03/04/22

Check your stack JSON