inn: %post calls user owned file allowing local privilege escalation to root
Published Jun 10, 2021
7.8
HIGHCVSS 3.1
EPSS 0.32%
Description
A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports SLE-15-SP2, openSUSE Leap 15.2 allows local attackers to escalate their privileges from the news user to root. This issue affects: SUSE Linux Enterprise Server 11-SP3 inn version inn-2.4.2-170.21.3.1 and prior versions. openSUSE Backports SLE-15-SP2 inn versions prior to 2.6.2. openSUSE Leap 15.2 inn versions prior to 2.6.2.
Affected products
-
Affected
- ≥ inn, ≤ inn-2.4.2-170.21.3.1
-
Affected
- ≥ inn, < 2.6.2
-
Affected
- ≥ inn, < 2.6.2
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| SUSE | SUSE Linux Enterprise Server 11-SP3 | unknown | Affected
|
| openSUSE | openSUSE Backports SLE-15-SP2 | unknown | Affected
|
| openSUSE | openSUSE Leap 15.2 | unknown | Affected
|
Configuration 1
Running on/with
- 11
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (2)
- https://bugzilla.suse.com/show_bug.cgi?id=1182321 x_refsource_CONFIRMExploitIssue TrackingVendor Advisory
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-18869 Advisory
| Link | Providers | Tags |
|---|---|---|
| https://bugzilla.suse.com/show_bug.cgi?id=1182321 | x_refsource_CONFIRMExploitIssue TrackingVendor Advisory | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-18869 | Advisory |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
No data
Red Hat
No data
GitHub
No data