CVE-2011-1154

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-03-30 · updated 2026-06-16
Weakness: CWE-20

Description

The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.

Affected products

gentoo Logrotate: through 3.7.9; 3.3-r2, 3.5.9, 3.5.9-r1, 3.6.5, 3.6.5-r1, 3.7 (+7)

References

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057845.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056992.html
http://openwall.com/lists/oss-security/2011/03/04/16
http://openwall.com/lists/oss-security/2011/03/04/17
http://openwall.com/lists/oss-security/2011/03/04/18
http://openwall.com/lists/oss-security/2011/03/04/19
http://openwall.com/lists/oss-security/2011/03/04/22
http://openwall.com/lists/oss-security/2011/03/04/24
http://openwall.com/lists/oss-security/2011/03/04/25
http://openwall.com/lists/oss-security/2011/03/04/26
http://openwall.com/lists/oss-security/2011/03/04/27
http://openwall.com/lists/oss-security/2011/03/04/28

Get alerted when CVE-2011-1154 or the next vulnerability affects your stack