log.c in Squid Analysis Report Generator (sarg) through 2.3.11 allows local privilege escalation. By default, it uses a fixed temporary directory /tmp/sarg. As the root user, sarg creates this directory or reuses an existing one in an insecure manner. An attacker can pre-create the directory, and place symlinks in it (after winning a /tmp/sarg/denied.int_unsort race condition). The outcome will be corrupted or newly created files in privileged file system locations.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - log.c in Squid Analysis Report Generator (sarg) through 2.3.11 allows local privilege escalation. By     default, it uses a fixed temporary directory /tmp/sarg. As the root user, sarg creates this directory or     reuses an existing one in an insecure manner. An attacker can pre-create the directory, and place symlinks     in it (after winning a /tmp/sarg/denied.int_unsort race condition). The outcome will be corrupted or newly     created files in privileged file system locations. (CVE-2019-18932)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-202007-32 (Sarg: Local privilege escalation)

    A flaw in Sarg&rsquo;s handling of temporary directories was discovered.
  Impact :

    A local attacker may be able to escalate privileges.
  Workaround :

    There is no known workaround at this time.

This update for sarg fixes the following issues :

  - CVE-2019-18932: Fixed insecure usage of /tmp/sarg which     potentially allowed privilege escalation or denial of     service (boo#1156643).

ID	Name	Product	Family	Type	Severity
258719	Linux Distros Unpatched Vulnerability : CVE-2019-18932	Nessus	Misc.	Local	high
138955	GLSA-202007-32 : Sarg: Local privilege escalation	Nessus	Gentoo Local Security Checks	Local	high
133340	openSUSE Security Update : sarg (openSUSE-2020-117)	Nessus	SuSE Local Security Checks	Local	high

Detections

Analytics

CVE-2019-18932

high

Tenable Plugins

high

high

high