aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file.

The remote Ubuntu 16.04 ESM / 18.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-4869-1 advisory.

    It was discovered that aria2 could accidentally leak authentication data. An attacker could possibly use     this to gain access to sensitive information.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2873 advisory.

  - aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password     in a file, which might allow local users to obtain sensitive information by reading this file.
    (CVE-2019-3500)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1125-1 advisory.

  - aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password     in a file, which might allow local users to obtain sensitive information by reading this file.
    (CVE-2019-3500)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Dhiraj Mishra discovered that aria2 incorrectly stored authentication information. A local attacker could possibly use this issue to obtain credentials.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix Password leak for HTTP based authentication CVE-2019-3500 (rhbz #1663991 #1663992 #1663993)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that aria2 (the lightweight command-line download utility) can store passed user credentials in a log file when using the --log option. This might allow local users to obtain sensitive information by reading this file.

For Debian 8 'Jessie', this problem has been fixed in version 1.18.8-1+deb8u1.

We recommend that you upgrade your aria2 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for aria2 fixes the following security issue :

  - CVE-2019-3500: Metadata and potential password leaks via
    --log= (boo#1120488)

ID	Name	Product	Family	Severity
183161	Ubuntu 16.04 ESM / 18.04 ESM : aria2 vulnerability (USN-4869-1)	Nessus	Ubuntu Local Security Checks	high
156419	Debian DLA-2873-1 : aria2 - LTS security update	Nessus	Debian Local Security Checks	high
152462	openSUSE 15 Security Update : aria2 (openSUSE-SU-2021:1125-1)	Nessus	SuSE Local Security Checks	high
124676	Ubuntu 18.10 / 19.04 : aria2 vulnerability (USN-3965-1)	Nessus	Ubuntu Local Security Checks	high
124479	Fedora 30 : aria2 (2019-248ad990b4)	Nessus	Fedora Local Security Checks	high
121313	Debian DLA-1636-1 : aria2 security update	Nessus	Debian Local Security Checks	high
121156	openSUSE Security Update : aria2 (openSUSE-2019-50)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2019-3500

high

Tenable Plugins

high

high

high

high

high

high

high