Read the docs
TI-2011-00951 Aliases CVE-2011-1098GHSA-h8gr-59qr-mxm6

Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and…

Priority LOW 10CWE-362Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Partial · None · None
Fix status
Partial Red Hat: 4 fixed, 2 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place.

Why it matters now

EPSS 0.00281 20th percentileScored 2026-11-07
Fix Partial Red Hat: 1 advisoryRed Hat: 4 fixed, 2 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 14

CPEVersionsRoleVendor
cpe:2.3:a:gentoo:logrotate:*:*:*:*:*:*:*:*up to 3.7.9Vulnerablegentoo
cpe:2.3:a:gentoo:logrotate:3.3:r2:*:*:*:*:*:*3.3 r2Vulnerablegentoo
cpe:2.3:a:gentoo:logrotate:3.5.9:*:*:*:*:*:*:*3.5.9Vulnerablegentoo
cpe:2.3:a:gentoo:logrotate:3.5.9:r1:*:*:*:*:*:*3.5.9 r1Vulnerablegentoo
cpe:2.3:a:gentoo:logrotate:3.6.5:*:*:*:*:*:*:*3.6.5Vulnerablegentoo
cpe:2.3:a:gentoo:logrotate:3.6.5:r1:*:*:*:*:*:*3.6.5 r1Vulnerablegentoo
cpe:2.3:a:gentoo:logrotate:3.7:*:*:*:*:*:*:*3.7Vulnerablegentoo
cpe:2.3:a:gentoo:logrotate:3.7.1:*:*:*:*:*:*:*3.7.1Vulnerablegentoo
cpe:2.3:a:gentoo:logrotate:3.7.1:r1:*:*:*:*:*:*3.7.1 r1Vulnerablegentoo
cpe:2.3:a:gentoo:logrotate:3.7.1:r2:*:*:*:*:*:*3.7.1 r2Vulnerablegentoo
  • cpe:2.3:a:gentoo:logrotate:*:*:*:*:*:*:*:* Versions up to 3.7.9 Vulnerable ·gentoo
  • cpe:2.3:a:gentoo:logrotate:3.3:r2:*:*:*:*:*:* Versions 3.3 r2 Vulnerable ·gentoo
  • cpe:2.3:a:gentoo:logrotate:3.5.9:*:*:*:*:*:*:* Versions 3.5.9 Vulnerable ·gentoo
  • cpe:2.3:a:gentoo:logrotate:3.5.9:r1:*:*:*:*:*:* Versions 3.5.9 r1 Vulnerable ·gentoo
  • cpe:2.3:a:gentoo:logrotate:3.6.5:*:*:*:*:*:*:* Versions 3.6.5 Vulnerable ·gentoo
  • cpe:2.3:a:gentoo:logrotate:3.6.5:r1:*:*:*:*:*:* Versions 3.6.5 r1 Vulnerable ·gentoo
  • cpe:2.3:a:gentoo:logrotate:3.7:*:*:*:*:*:*:* Versions 3.7 Vulnerable ·gentoo
  • cpe:2.3:a:gentoo:logrotate:3.7.1:*:*:*:*:*:*:* Versions 3.7.1 Vulnerable ·gentoo
  • cpe:2.3:a:gentoo:logrotate:3.7.1:r1:*:*:*:*:*:* Versions 3.7.1 r1 Vulnerable ·gentoo
  • cpe:2.3:a:gentoo:logrotate:3.7.1:r2:*:*:*:*:*:* Versions 3.7.1 r2 Vulnerable ·gentoo
Show 4 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:gentoo:logrotate:3.7.2:*:*:*:*:*:*:*3.7.2Vulnerablegentoo
cpe:2.3:a:gentoo:logrotate:3.7.6:*:*:*:*:*:*:*3.7.6Vulnerablegentoo
cpe:2.3:a:gentoo:logrotate:3.7.7:*:*:*:*:*:*:*3.7.7Vulnerablegentoo
cpe:2.3:a:gentoo:logrotate:3.7.8:*:*:*:*:*:*:*3.7.8Vulnerablegentoo
  • cpe:2.3:a:gentoo:logrotate:3.7.2:*:*:*:*:*:*:* Versions 3.7.2 Vulnerable ·gentoo
  • cpe:2.3:a:gentoo:logrotate:3.7.6:*:*:*:*:*:*:* Versions 3.7.6 Vulnerable ·gentoo
  • cpe:2.3:a:gentoo:logrotate:3.7.7:*:*:*:*:*:*:* Versions 3.7.7 Vulnerable ·gentoo
  • cpe:2.3:a:gentoo:logrotate:3.7.8:*:*:*:*:*:*:* Versions 3.7.8 Vulnerable ·gentoo

Remediation

Red Hat 1 advisory

  • RHSA-2011:0407 Released 2011-03-31 · Red Hat rating Moderate
    logrotate security update
    • Red Hat Enterprise Linux Desktop (v. 6) logrotate-3.7.8-12.el6_0.1
    • Red Hat Enterprise Linux HPC Node (v. 6) logrotate-3.7.8-12.el6_0.1
    • Red Hat Enterprise Linux Server (v. 6) logrotate-3.7.8-12.el6_0.1
    • Red Hat Enterprise Linux Workstation (v. 6) logrotate-3.7.8-12.el6_0.1

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 4AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2011:0407
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2011:0407
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2011:0407
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2011:0407

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-1098
  2. 2026-10-03 Alias added: GHSA-h8gr-59qr-mxm6

References

Patch 4

Advisory 4

Other 34

  • TI-2011-01006 The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow… CVSS 2.0MEDIUM 6.9
  • TI-2011-01369 The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to… CVSS 2.0MEDIUM 6.3
  • TI-2011-01368 The default configuration of logrotate on Gentoo Linux uses root privileges to process… CVSS 2.0MEDIUM 6.3
  • TI-2011-01367 The default configuration of logrotate on Debian GNU/Linux uses root privileges to… CVSS 2.0MEDIUM 6.3
  • TI-2011-01007 The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow… CVSS 2.0LOW 1.9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences