EulerOS 2.0 SP2 : sssd (EulerOS-SA-2019-1754)
Low Nessus Plugin ID 126881
SynopsisThe remote EulerOS host is missing a security update.
DescriptionAccording to the version of the sssd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :
- A vulnerability was found in sssd where, if a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot().(CVE-2019-3811)
Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
SolutionUpdate the affected sssd package.