The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - nfs-utils: root-owned files stored in insecure /var/lib/nfs (CVE-2019-3689)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

According to the versions of the nfs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in     SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is     owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised,     it can therefore trick processes running with root privileges into creating/overwriting files anywhere on     the system. (CVE-2019-3689)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the nfs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in     SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is     owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised,     it can therefore trick processes running with root privileges into creating/overwriting files anywhere on     the system. (CVE-2019-3689)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the nfs-utils packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - The nfs-utils package in SUSE Linux Enterprise Server     12 before and including version 1.3.0-34.18.1 and in     SUSE Linux Enterprise Server 15 before and including     version 2.1.1-6.10.2 the directory /var/lib/nfs is     owned by statd:nogroup. This directory contains files     owned and managed by root. If statd is compromised, it     can therefore trick processes running with root     privileges into creating/overwriting files anywhere on     the system.(CVE-2019-3689)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the nfs-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The nfs-utils package in SUSE Linux Enterprise Server     12 before and including version 1.3.0-34.18.1 and in     SUSE Linux Enterprise Server 15 before and including     version 2.1.1-6.10.2 the directory /var/lib/ nfs is     owned by statd:nogroup. This directory contains files     owned and managed by root. If statd is compromised, it     can therefore trick processes running with root     privileges into creating/overwriting files anywhere on     the system.(CVE-2019-3689)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that the nfs-utils package set incorrect permissions on the /var/lib/nfs directory. An attacker could possibly use this issue to escalate privileges.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for nfs-utils fixes the following issues :

  - CVE-2019-3689: Fixed root-owned files stored in insecure     /var/lib/nfs. (bsc#1150733)

This update was imported from the SUSE:SLE-15-SP1:Update update project.

This update for nfs-utils fixes the following issues :

  - CVE-2019-3689: Fixed root-owned files stored in insecure     /var/lib/nfs. (bsc#1150733)

This update was imported from the SUSE:SLE-15:Update update project.

This update for nfs-utils fixes the following issues :

CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs.
(bsc#1150733)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

In the nfs-utils package, providing support files for Network File System (NFS) including the rpc.statd daemon, the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.

For Debian 8 'Jessie', this problem has been fixed in version 1.2.8-9+deb8u1.

We recommend that you upgrade your nfs-utils packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
195358	RHEL 5 : nfs-utils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
169634	EulerOS Virtualization 3.0.2.6 : nfs-utils (EulerOS-SA-2023-1076)	Nessus	Huawei Local Security Checks	critical
165882	EulerOS Virtualization 3.0.6.6 : nfs-utils (EulerOS-SA-2022-2520)	Nessus	Huawei Local Security Checks	critical
161552	EulerOS 2.0 SP3 : nfs-utils (EulerOS-SA-2022-1748)	Nessus	Huawei Local Security Checks	critical
160686	EulerOS Virtualization 3.0.2.0 : nfs-utils (EulerOS-SA-2022-1695)	Nessus	Huawei Local Security Checks	critical
159103	EulerOS 2.0 SP5 : nfs-utils (EulerOS-SA-2022-1333)	Nessus	Huawei Local Security Checks	critical
140975	EulerOS Virtualization for ARM 64 3.0.6.0 : nfs-utils (EulerOS-SA-2020-2027)	Nessus	Huawei Local Security Checks	critical
139974	EulerOS 2.0 SP8 : nfs-utils (EulerOS-SA-2020-1871)	Nessus	Huawei Local Security Checks	critical
137744	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : nfs-utils vulnerability (USN-4400-1)	Nessus	Ubuntu Local Security Checks	critical
130578	openSUSE Security Update : nfs-utils (openSUSE-2019-2435)	Nessus	SuSE Local Security Checks	critical
130387	openSUSE Security Update : nfs-utils (openSUSE-2019-2408)	Nessus	SuSE Local Security Checks	critical
130342	SUSE SLED15 / SLES15 Security Update : nfs-utils (SUSE-SU-2019:2782-1)	Nessus	SuSE Local Security Checks	critical
130341	SUSE SLED12 / SLES12 Security Update : nfs-utils (SUSE-SU-2019:2781-1)	Nessus	SuSE Local Security Checks	critical
130255	SUSE SLED15 / SLES15 Security Update : nfs-utils (SUSE-SU-2019:2776-1)	Nessus	SuSE Local Security Checks	critical
130254	SUSE SLES12 Security Update : nfs-utils (SUSE-SU-2019:2771-1)	Nessus	SuSE Local Security Checks	critical
130071	Debian DLA-1965-1 : nfs-utils security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2019-3689

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical