The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1520-1 advisory.

  - The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the     easy permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server     permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to     081d081dcfaf61710bda34bc21c80c66276119aa. (CVE-2019-3687)

  - The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including     version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had     squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain     persistence by changing the binary (CVE-2019-3688)

  - A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE     Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries     on other binaries because it erroneously followed symlinks. The symlinks can't be controlled by attackers     on default systems, so exploitation is difficult. This issue affects: SUSE Linux Enterprise Server 12     permissions versions prior to 2015.09.28.1626-17.27.1. SUSE Linux Enterprise Server 15 permissions     versions prior to 20181116-9.23.1. SUSE Linux Enterprise Server 11 permissions versions prior to     2013.1.7-0.6.12.1. (CVE-2020-8013)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2280-1 advisory.

  - The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including     version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had     squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain     persistence by changing the binary (CVE-2019-3688)

  - The chkstat tool in the permissions package followed symlinks before commit     a9e1d26cd49ef9ee0c2060c859321128a6dd4230 (please also check the additional hardenings after this fix).
    This allowed local attackers with control over a path that is traversed by chkstat to escalate privileges.
    (CVE-2019-3690)

  - A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE     Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries     on other binaries because it erroneously followed symlinks. The symlinks can't be controlled by attackers     on default systems, so exploitation is difficult. This issue affects: SUSE Linux Enterprise Server 12     permissions versions prior to 2015.09.28.1626-17.27.1. SUSE Linux Enterprise Server 15 permissions     versions prior to 20181116-9.23.1. SUSE Linux Enterprise Server 11 permissions versions prior to     2013.1.7-0.6.12.1. (CVE-2020-8013)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for permissions fixes the following issues :

Security issue fixed :

CVE-2020-8013: Fixed a local privilege escalation with mrsh and wodim (bsc#1163922).

Non-security issues fixed :

Fixed regression where chkstat breaks without /proc available (bsc#1160764, bsc#1160594)

Fixed capability handling when doing multiple permission changes at once (bsc#1161779)

Fixed handling of relative directory symlinks in chkstat

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for permissions fixes the following issues :

  - CVE-2019-3688: Changed wrong ownership in     /usr/sbin/pinger to root:squid which could have allowed     a squid user to gain persistence by changing the binary     (bsc#1093414).

  - CVE-2019-3690: Fixed a privilege escalation through     untrusted symbolic links (bsc#1150734).

  - Fixed a regression which caused sagmentation fault     (bsc#1157198).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

This update for permissions fixes the following issues :

Security issues fixed :

CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary (bsc#1093414).

CVE-2019-3690: Fixed a privilege escalation through untrusted symbolic links (bsc#1150734).

Other issue addressed: Corrected a badly constracted file which could have allowed treating of the shell environment as permissions files (bsc#1097665,bsc#1047247).

Fixed a regression which caused sagmentation fault (bsc#1157198).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for permissions fixes the following issues :

CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary (bsc#1093414).

CVE-2019-3690: Fixed a privilege escalation through untrusted symbolic links (bsc#1150734).

Fixed a regression which caused sagmentation fault (bsc#1157198).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for permissions fixes the following issues :

CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary (bsc#1093414).

CVE-2019-3690: Fixed a privilege escalation through untrusted symbolic links (bsc#1150734).

Fixed a regression which caused segmentation fault (bsc#1157198).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for squid to version 4.9 fixes the following issues :

Security issues fixed :

  - CVE-2019-13345: Fixed multiple cross-site scripting     vulnerabilities in cachemgr.cgi (bsc#1140738).

  - CVE-2019-12526: Fixed potential remote code execution     during URN processing (bsc#1156326).

  - CVE-2019-12523,CVE-2019-18676: Fixed multiple improper     validations in URI processing (bsc#1156329).

  - CVE-2019-18677: Fixed Cross-Site Request Forgery in HTTP     Request processing (bsc#1156328).

  - CVE-2019-18678: Fixed incorrect message parsing which     could have led to HTTP request splitting issue     (bsc#1156323).

  - CVE-2019-18679: Fixed information disclosure when     processing HTTP Digest Authentication (bsc#1156324).

Other issues addressed :

  - Fixed DNS failures when peer name was configured with     any upper case characters

  - Fixed several rock cache_dir corruption issues

This update was imported from the SUSE:SLE-15:Update update project.

This update for squid to version 4.9 fixes the following issues :

Security issues fixed :

CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi (bsc#1140738).

CVE-2019-12526: Fixed potential remote code execution during URN processing (bsc#1156326).

CVE-2019-12523,CVE-2019-18676: Fixed multiple improper validations in URI processing (bsc#1156329).

CVE-2019-18677: Fixed Cross-Site Request Forgery in HTTP Request processing (bsc#1156328).

CVE-2019-18678: Fixed incorrect message parsing which could have led to HTTP request splitting issue (bsc#1156323).

CVE-2019-18679: Fixed information disclosure when processing HTTP Digest Authentication (bsc#1156324).

Other issues addressed :

  - Fixed DNS failures when peer name was configured with     any upper case characters

  - Fixed several rock cache_dir corruption issues

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
155823	openSUSE 15 Security Update : permissions (openSUSE-SU-2021:1520-1)	Nessus	SuSE Local Security Checks	high
151491	SUSE SLES12 Security Update : permissions (SUSE-SU-2021:2280-1)	Nessus	SuSE Local Security Checks	high
136394	SUSE SLES15 Security Update : permissions (SUSE-SU-2020:1163-1)	Nessus	SuSE Local Security Checks	high
131997	openSUSE Security Update : permissions (openSUSE-2019-2672)	Nessus	SuSE Local Security Checks	high
131755	SUSE SLED12 / SLES12 Security Update : permissions (SUSE-SU-2019:3183-1)	Nessus	SuSE Local Security Checks	high
131754	SUSE SLED15 / SLES15 Security Update : permissions (SUSE-SU-2019:3182-1)	Nessus	SuSE Local Security Checks	high
131753	SUSE SLES12 Security Update : permissions (SUSE-SU-2019:3180-1)	Nessus	SuSE Local Security Checks	high
131220	openSUSE Security Update : squid (openSUSE-2019-2541)	Nessus	SuSE Local Security Checks	critical
131219	openSUSE Security Update : squid (openSUSE-2019-2540)	Nessus	SuSE Local Security Checks	critical
131070	SUSE SLES15 Security Update : squid (SUSE-SU-2019:2975-1)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2019-3688

high

Tenable Plugins

high

high

high

high

high

high

high

critical

critical

critical