CVE-2011-1154: gentoo logrotate Improper Input Validation

CVSS: 6.9v2.0MediumModified

AliasesDEBIAN-CVE-2011-1154

Published 30-03-2011Last modified 06-08-2024

Vulnerability summary

CVE-2011-1154 is a medium (CVSS 6.9) Improper Input Validation vulnerability in gentoo logrotate. EPSS estimates a 0.41% chance of exploitation in the next 30 days, higher than 33.9% of scored vulnerabilities.

Overall risk

28/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.9/10

010

Medium · v2.0 (NVD)

EPSS score

0.41%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2 · Related 1

OPENSUSE-SU-2024:10231-1 RHSA-2011:0407

Timeline

30-03-2011
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.

CVSS metrics

1 score · 1 source · 1 version

v2.06.9

EPSS trend

Probability

0.41%

Chance of exploitation in the next 30 days

Percentile

34%

Versus all other CVEs

30-day change

0.00 pp

From 0.41% on 18-09-2026

18-09-202618-10-2026

EPSS score

0.41%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Debian1 product

logrotate< 3.8.0-1

Gentoo1 product

logrotate≤ 3.7.9 | 3.3:r2 | 3.5.9 | 3.5.9:r1 | 3.6.5 | 3.6.5:r1 | 3.7 | 3.7.1 | 3.7.1:r1 | 3.7.1:r2 | 3.7.2 | 3.7.6 | 3.7.7 | 3.7.8

2 vendors · 2 products

References

44 links

openwall.com/lists/oss-security/2011/03/04/19Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/04/16Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/04/25Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/04/30Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/04/26Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/10/3Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/04/28Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/08/5Mailing ListX Refsource MLIST
secunia.com/advisories/43955Third Party AdvisoryX Refsource SECUNIA
openwall.com/lists/oss-security/2011/03/07/5Mailing ListX Refsource MLIST

Show all 44 references

openwall.com/lists/oss-security/2011/03/04/31Mailing ListX Refsource MLIST
www.vupen.com/english/advisories/2011/0961VDB EntryX Refsource VUPEN
openwall.com/lists/oss-security/2011/03/04/17Mailing ListX Refsource MLIST
bugzilla.redhat.com/show_bug.cgi?id=680796X Refsource CONFIRMPatch
openwall.com/lists/oss-security/2011/03/10/6Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/06/3Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/04/29Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/07/6Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/05/6Mailing ListX Refsource MLIST
lists.fedoraproject.org/pipermail/package-announce/2011-April/057845.htmlVendor AdvisoryX Refsource FEDORA
openwall.com/lists/oss-security/2011/03/05/4Mailing ListX Refsource MLIST
www.vupen.com/english/advisories/2011/0791VDB EntryX Refsource VUPENVendor Advisory
www.mandriva.com/security/advisories?name=MDVSA-2011:065Vendor AdvisoryX Refsource MANDRIVA
openwall.com/lists/oss-security/2011/03/07/11Mailing ListX Refsource MLISTPatch
openwall.com/lists/oss-security/2011/03/23/11Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/06/5Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/04/18Mailing ListX Refsource MLIST
lists.fedoraproject.org/pipermail/package-announce/2011-March/056992.htmlVendor AdvisoryX Refsource FEDORAPatch
openwall.com/lists/oss-security/2011/03/10/2Mailing ListX Refsource MLIST
www.redhat.com/support/errata/RHSA-2011-0407.htmlVendor AdvisoryX Refsource REDHAT
openwall.com/lists/oss-security/2011/03/11/3Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/10/7Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/05/8Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/04/22Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/11/5Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/04/27Mailing ListX Refsource MLIST
www.vupen.com/english/advisories/2011/0872VDB EntryX Refsource VUPEN
openwall.com/lists/oss-security/2011/03/04/32Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/14/26Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/04/24Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/06/4Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/06/6Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/03/04/33Mailing ListX Refsource MLIST
security-tracker.debian.org/tracker/CVE-2011-1154Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities