PT-2019-12473 · Groonga · Groonga-Httpd

Wolfgang Hotwagner · Publicado 2019-05-02 · Atualizado 2019-05-03 · CVE-2019-11675

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions groonga-httpd version 6.1.5-1

Description The issue is related to the Debian packaging of the Groonga HTTP server, where the ownership of /var/log/groonga is set to the groonga account. This might allow local users to obtain root access due to unsafe interaction with logrotate. An example exploitation method involves a race condition to insert a symlink from /var/log/groonga/httpd to /etc/bash completion.d.

Recommendations For groonga-httpd version 6.1.5-1, consider changing the ownership of /var/log/groonga to a more secure setting to prevent local users from obtaining root access. As a temporary workaround, restrict access to the logrotate configuration to minimize the risk of exploitation.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2019-11675

Produtos afetados

Groonga-Httpd

Referências · 8

• https://osv.dev/vulnerability/CVE-2019-11675 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-11675 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-11675 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-11675 · Nota de Segurança
• https://bugs.debian.org/928304 · Nota
• https://cve.org/CVERecord?id=CVE-2019-11675 · Nota de Segurança
• https://ubuntu.com/security/CVE-2019-11675 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2019-11675 · Aviso do Fabricante