# CVEs published 2011-03-30

9 CVEs were published on March 30, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2009-5064](https://cve.now/CVE-2009-5064.md): ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file link (no CVSS)
- [CVE-2011-1097](https://cve.now/CVE-2011-1097.md): rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of s (no CVSS)
- [CVE-2011-1098](https://cve.now/CVE-2011-1098.md): Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening (no CVSS)
- [CVE-2011-1154](https://cve.now/CVE-2011-1154.md): The shred\_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands (no CVSS)
- [CVE-2011-1155](https://cve.now/CVE-2011-1155.md): The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service ( (no CVSS)
- [CVE-2011-1548](https://cve.now/CVE-2011-1548.md): The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files in directories that permit non-root write a (no CVSS)
- [CVE-2011-1549](https://cve.now/CVE-2011-1549.md): The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write acces (no CVSS)
- [CVE-2011-1550](https://cve.now/CVE-2011-1550.md): The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root wr (no CVSS)
- [CVE-2011-1551](https://cve.now/CVE-2011-1551.md): SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ directory tree to the web-service user account, which might allow local use (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-03-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
