CVE-2011-1098

Опубликовано: 30 мар. 2011

Источник: nvd

CVSS2: 1.9

EPSS Низкий

Описание

Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gentoo:logrotate:*:*:*:*:*:*:*:*

Версия до 3.7.9 (включая)

cpe:2.3:a:gentoo:logrotate:3.3:r2:*:*:*:*:*:*

cpe:2.3:a:gentoo:logrotate:3.5.9:*:*:*:*:*:*:*

cpe:2.3:a:gentoo:logrotate:3.5.9:r1:*:*:*:*:*:*

cpe:2.3:a:gentoo:logrotate:3.6.5:*:*:*:*:*:*:*

cpe:2.3:a:gentoo:logrotate:3.6.5:r1:*:*:*:*:*:*

cpe:2.3:a:gentoo:logrotate:3.7:*:*:*:*:*:*:*

cpe:2.3:a:gentoo:logrotate:3.7.1:*:*:*:*:*:*:*

cpe:2.3:a:gentoo:logrotate:3.7.1:r1:*:*:*:*:*:*

cpe:2.3:a:gentoo:logrotate:3.7.1:r2:*:*:*:*:*:*

cpe:2.3:a:gentoo:logrotate:3.7.2:*:*:*:*:*:*:*

cpe:2.3:a:gentoo:logrotate:3.7.6:*:*:*:*:*:*:*

cpe:2.3:a:gentoo:logrotate:3.7.7:*:*:*:*:*:*:*

cpe:2.3:a:gentoo:logrotate:3.7.8:*:*:*:*:*:*:*

EPSS

Процентиль: 14%

0.00045

Низкий

1.9 Low

CVSS2

Дефекты

CWE-362

Связанные уязвимости

CVE-2011-1098

ubuntu

около 14 лет назад

Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place.

CVE-2011-1098

redhat

больше 14 лет назад

Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place.

CVE-2011-1098

debian

около 14 лет назад

Race condition in the createOutputFile function in logrotate.c in logr ...

GHSA-h8gr-59qr-mxm6

github

около 3 лет назад

Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place.

ELSA-2011-0407

oracle-oval

около 14 лет назад

ELSA-2011-0407: logrotate security update (MODERATE)

EPSS

Процентиль: 14%

0.00045

Низкий

1.9 Low

CVSS2

Дефекты

CWE-362