Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage
Back

CVE-2011-1549

The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write…

Description

The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by directories under /var/log/ for packages.

Timeline

  1. ID reserved

    By mitre

  2. Published

  3. · 13 years later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2011-1549, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified2.0Medium6.3AV:L/AC:M/Au:N/C:N/I:C/A:C
EPSS (exploitation in 30 days)
0.36% · top 69% of all CVEs (9 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.3.

Affected products

  • n/a

    • affected n/a

References

35

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2011-1549 badge
[![CVE-2011-1549](https://cveledger.app/badge/CVE-2011-1549.svg)](https://cveledger.app/cve/CVE-2011-1549)

Record last updated .