PT-2018-3442 · Suse · Supportutils+1
Vítězslav Čížek
·
Publicado
2018-11-29
·
Atualizado
2024-06-15
·
CVE-2018-19637
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions:
Supportutils versions prior to 3.1-5.7.1
Description:
The issue is related to incorrect handling of file access, allowing local attackers to overwrite files on systems without symlink protection. This can be exploited by an attacker to modify arbitrary files. The vulnerability is associated with the Supportutils package for the SUSE Linux operating system.
Recommendations:
For versions prior to 3.1-5.7.1, update to version 3.1-5.7.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the /tmp/supp log file to minimize the risk of exploitation.
Exploit
Correção
Link Following
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Supportutils
Suse