--- title: "CVE-2011-1550\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2011-1550?format=md keywords: index, follow --- # CVE-2011-1550 Publication date 30 March 2011 Last updated 24 July 2024 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by directories for the (1) cobbler, (2) inn, (3) safte-monitor, and (4) uucp packages. [Read the notes from the security team](https://ubuntu.com/security/CVE-2011-1550?format=md#notes) ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | logrotate | 10.10 maverick | Not affected | | 10.04 LTS lucid | Not affected | | 9.10 karmic | Not affected | | 8.04 LTS hardy | Not affected | | 6.06 LTS dapper | Not affected | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## Notes --- ### [mdeslaur](https://launchpad.net/~mdeslaur) SUSE-specific CVE (see CVE-2011-1548 for Debian) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1550) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2011-1550) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2011-1550) * [Debian](https://security-tracker.debian.org/tracker/CVE-2011-1550) ### Other references * *