Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2019-3688

squid: /usr/sbin/pinger packaged with wrong permission

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE SUSE Linux Enterprise Server 15

  • squid to ≤ 4.8-5.8.1affected

SUSE SUSE Linux Enterprise Server 12

  • squid to ≤ 3.5.21-26.17.1affected

References