CVE-2011-1098 : Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.

Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place.

Published 2011-03-30 22:55:02

Updated 2023-02-13 04:29:24

Source Red Hat, Inc.

View at NVD, CVE.org

Products affected by CVE-2011-1098

Gentoo » Logrotate
Versions up to, including, (<=) 3.7.9
cpe:2.3:a:gentoo:logrotate:*:*:*:*:*:*:*:*
Matching versions
Gentoo » Logrotate » Version: 3.7.8
cpe:2.3:a:gentoo:logrotate:3.7.8:*:*:*:*:*:*:*
Matching versions
Gentoo » Logrotate » Version: 3.7.7
cpe:2.3:a:gentoo:logrotate:3.7.7:*:*:*:*:*:*:*
Matching versions
Gentoo » Logrotate » Version: 3.6.5 Update R1
cpe:2.3:a:gentoo:logrotate:3.6.5:r1:*:*:*:*:*:*
Matching versions
Gentoo » Logrotate » Version: 3.6.5
cpe:2.3:a:gentoo:logrotate:3.6.5:*:*:*:*:*:*:*
Matching versions
Gentoo » Logrotate » Version: 3.7.1
cpe:2.3:a:gentoo:logrotate:3.7.1:*:*:*:*:*:*:*
Matching versions
Gentoo » Logrotate » Version: 3.7
cpe:2.3:a:gentoo:logrotate:3.7:*:*:*:*:*:*:*
Matching versions
Gentoo » Logrotate » Version: 3.7.1 Update R1
cpe:2.3:a:gentoo:logrotate:3.7.1:r1:*:*:*:*:*:*
Matching versions
Gentoo » Logrotate » Version: 3.7.6
cpe:2.3:a:gentoo:logrotate:3.7.6:*:*:*:*:*:*:*
Matching versions
Gentoo » Logrotate » Version: 3.3 Update R2
cpe:2.3:a:gentoo:logrotate:3.3:r2:*:*:*:*:*:*
Matching versions
Gentoo » Logrotate » Version: 3.7.2
cpe:2.3:a:gentoo:logrotate:3.7.2:*:*:*:*:*:*:*
Matching versions
Gentoo » Logrotate » Version: 3.7.1 Update R2
cpe:2.3:a:gentoo:logrotate:3.7.1:r2:*:*:*:*:*:*
Matching versions
Gentoo » Logrotate » Version: 3.5.9 Update R1
cpe:2.3:a:gentoo:logrotate:3.5.9:r1:*:*:*:*:*:*
Matching versions
Gentoo » Logrotate » Version: 3.5.9
cpe:2.3:a:gentoo:logrotate:3.5.9:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2011-1098

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 14 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2011-1098

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
1.9	LOW	AV:L/AC:M/Au:N/C:P/I:N/A:N	3.4	2.9	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

CWE ids for CVE-2011-1098

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2011-1098

http://openwall.com/lists/oss-security/2011/03/04/29

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/08/5

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://www.redhat.com/support/errata/RHSA-2011-0407.html

Support

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/05/6

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/04/26

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057845.html

[SECURITY] Fedora 14 Update: logrotate-3.7.9-2.fc14

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/07/11

oss-security - Re: CVE Request -- logrotate -- nine issues
Patch

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/04/30

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/04/27

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/14/26

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://www.mandriva.com/security/advisories?name=MDVSA-2011:065

mandriva.com

CVEs referencing this url
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056992.html

[SECURITY] Fedora 15 Update: logrotate-3.7.9-8.fc15
Patch

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/06/3

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/04/16

oss-security - CVE Request -- logrotate -- nine issues
Patch

CVEs referencing this url
http://www.vupen.com/english/advisories/2011/0961

Webmail | OVH- OVH

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/05/4

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/04/22

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/04/33

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/04/18

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/04/17

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/04/28

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/10/2

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
https://bugzilla.redhat.com/show_bug.cgi?id=680798

680798 – (CVE-2011-1098) CVE-2011-1098 logrotate: TOCTOU race condition by creation of new files (between opening the file and moment, final permissions have been applied) [information disclosure]
Patch
http://openwall.com/lists/oss-security/2011/03/07/6

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/06/6

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/10/3

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/06/4

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/11/3

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/04/31

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/04/25

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/04/32

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/04/24

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/05/8

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/06/5

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/10/6

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/23/11

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://www.vupen.com/english/advisories/2011/0791

Webmail | OVH- OVH
Vendor Advisory

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/10/7

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/11/5

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://www.vupen.com/english/advisories/2011/0872

Webmail | OVH- OVH

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/07/5

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url
http://openwall.com/lists/oss-security/2011/03/04/19

oss-security - Re: CVE Request -- logrotate -- nine issues

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2011-1098

Products affected by CVE-2011-1098

Exploit prediction scoring system (EPSS) score for CVE-2011-1098

CVSS scores for CVE-2011-1098

CWE ids for CVE-2011-1098

References for CVE-2011-1098