The chkstat tool in the permissions package followed symlinks before commit a9e1d26cd49ef9ee0c2060c859321128a6dd4230 (please also check the additional hardenings after this fix). This allowed local attackers with control over a path that is traversed by chkstat to escalate privileges.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2280-1 advisory.

  - The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including     version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had     squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain     persistence by changing the binary (CVE-2019-3688)

  - The chkstat tool in the permissions package followed symlinks before commit     a9e1d26cd49ef9ee0c2060c859321128a6dd4230 (please also check the additional hardenings after this fix).
    This allowed local attackers with control over a path that is traversed by chkstat to escalate privileges.
    (CVE-2019-3690)

  - A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE     Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries     on other binaries because it erroneously followed symlinks. The symlinks can't be controlled by attackers     on default systems, so exploitation is difficult. This issue affects: SUSE Linux Enterprise Server 12     permissions versions prior to 2015.09.28.1626-17.27.1. SUSE Linux Enterprise Server 15 permissions     versions prior to 20181116-9.23.1. SUSE Linux Enterprise Server 11 permissions versions prior to     2013.1.7-0.6.12.1. (CVE-2020-8013)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES11 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2019:14237-1 advisory.

  - The chkstat tool in the permissions package followed symlinks before commit     a9e1d26cd49ef9ee0c2060c859321128a6dd4230 (please also check the additional hardenings after this fix).
    This allowed local attackers with control over a path that is traversed by chkstat to escalate privileges.
    (CVE-2019-3690)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for permissions fixes the following issues :

Security issue fixed :

CVE-2020-8013: Fixed a local privilege escalation with mrsh and wodim (bsc#1163922).

Non-security issues fixed :

Fixed regression where chkstat breaks without /proc available (bsc#1160764, bsc#1160594)

Fixed capability handling when doing multiple permission changes at once (bsc#1161779)

Fixed handling of relative directory symlinks in chkstat

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for permissions fixes the following issues :

  - CVE-2019-3688: Changed wrong ownership in     /usr/sbin/pinger to root:squid which could have allowed     a squid user to gain persistence by changing the binary     (bsc#1093414).

  - CVE-2019-3690: Fixed a privilege escalation through     untrusted symbolic links (bsc#1150734).

  - Fixed a regression which caused sagmentation fault     (bsc#1157198).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

This update for permissions fixes the following issues :

Security issues fixed :

CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary (bsc#1093414).

CVE-2019-3690: Fixed a privilege escalation through untrusted symbolic links (bsc#1150734).

Other issue addressed: Corrected a badly constracted file which could have allowed treating of the shell environment as permissions files (bsc#1097665,bsc#1047247).

Fixed a regression which caused sagmentation fault (bsc#1157198).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for permissions fixes the following issues :

CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary (bsc#1093414).

CVE-2019-3690: Fixed a privilege escalation through untrusted symbolic links (bsc#1150734).

Fixed a regression which caused sagmentation fault (bsc#1157198).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for permissions fixes the following issues :

CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary (bsc#1093414).

CVE-2019-3690: Fixed a privilege escalation through untrusted symbolic links (bsc#1150734).

Fixed a regression which caused segmentation fault (bsc#1157198).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
151491	SUSE SLES12 Security Update : permissions (SUSE-SU-2021:2280-1)	Nessus	SuSE Local Security Checks	high
150668	SUSE SLES11 Security Update : permissions (SUSE-SU-2019:14237-1)	Nessus	SuSE Local Security Checks	high
136394	SUSE SLES15 Security Update : permissions (SUSE-SU-2020:1163-1)	Nessus	SuSE Local Security Checks	high
131997	openSUSE Security Update : permissions (openSUSE-2019-2672)	Nessus	SuSE Local Security Checks	high
131755	SUSE SLED12 / SLES12 Security Update : permissions (SUSE-SU-2019:3183-1)	Nessus	SuSE Local Security Checks	high
131754	SUSE SLED15 / SLES15 Security Update : permissions (SUSE-SU-2019:3182-1)	Nessus	SuSE Local Security Checks	high
131753	SUSE SLES12 Security Update : permissions (SUSE-SU-2019:3180-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2019-3690

high

Tenable Plugins

high

high

high

high

high

high

high