ByteOS Network

CVE Vulnerability Details :

CVE-2019-3688

PUBLISHED

More Info Official Page

Assigner-suse

Assigner Org ID-404e59f5-483d-4b8a-8e7a-e67604dd8afb

Published At-07 Oct, 2019 | 14:00

Updated At-16 Sep, 2024 | 23:01

▼CVE Numbering Authority (CNA)

squid: /usr/sbin/pinger packaged with wrong permission

The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary

Affected Products

Vendor

SUSE

Product

SUSE Linux Enterprise Server 15

Versions

Affected

From squid through 4.8-5.8.1 (custom)

Vendor

SUSE

Product

SUSE Linux Enterprise Server 12

Versions

Affected

From squid through 3.5.21-26.17.1 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-276	CWE-276 Incorrect Default Permissions

Metrics

Version	Base score	Base severity	Vector
3.1	5.1	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

References

Hyperlink	Resource
https://bugzilla.suse.com/show_bug.cgi?id=1093414	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00053.html	vendor-advisory x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00056.html	vendor-advisory x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00024.html	vendor-advisory x_refsource_SUSE

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://bugzilla.suse.com/show_bug.cgi?id=1093414	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00053.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00056.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00024.html	vendor-advisory x_refsource_SUSE x_transferred

Affected Products

Affected

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References