UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.
References
| Link | Resource |
|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00014.html | Mailing List Third Party Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00022.html | Mailing List Third Party Advisory |
| https://bugzilla.suse.com/show_bug.cgi?id=1156309 | Exploit Issue Tracking Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
|
History
14 Sep 2021, 12:39
| Type | Values Removed | Values Added |
|---|---|---|
| References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00022.html - Mailing List, Third Party Advisory | |
| References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00014.html - Mailing List, Third Party Advisory | |
| CPE | cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:* cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* |
Information
Published : 2020-02-28 14:15
Updated : 2023-12-10 13:13
NVD link : CVE-2019-3698
Mitre link : CVE-2019-3698
CVE.ORG link : CVE-2019-3698
JSON object : View
Products Affected
opensuse
- leap
- backports_sle
suse
- linux_enterprise_server
nagios
- nagios
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')