PT-2020-10017 · Squid+1 · Squid Analysis Report Generator+1

Matthias Gerstner · Published 2020-01-21 · Updated 2022-04-26 · CVE-2019-18932

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Squid Analysis Report Generator (sarg) versions 2.3.11 and earlier

Description The issue allows local privilege escalation. By default, it uses a fixed temporary directory /tmp/sarg. As the root user, sarg creates this directory or reuses an existing one in an insecure manner. An attacker can pre-create the directory, and place symlinks in it (after winning a /tmp/sarg/denied.int unsort race condition). The outcome will be corrupted or newly created files in privileged file system locations.

Recommendations For Squid Analysis Report Generator (sarg) versions 2.3.11 and earlier, consider restricting access to the /tmp/sarg directory to minimize the risk of exploitation. As a temporary workaround, consider setting up proper permissions and access controls for the temporary directory used by sarg to prevent unauthorized access and modifications. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Link Following

Race Condition

Weakness Enumeration

CWE-59

CWE-362

Related Identifiers

CVE-2019-18932

OPENSUSE-SU-2020:0117-1

OPENSUSE-SU-2020:0140-1

OPENSUSE-SU-2020_0117-1

Affected Products

Squid Analysis Report Generator

Suse

References · 22

• https://cve.org/CVERecord?id=CVE-2019-18932 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00051.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-18932 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-18932 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-18932 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-18932 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0117-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0140-1 · Vendor Advisory
• https://security.gentoo.org/glsa/202007-32 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-18932 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00063.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-18932 · Vendor Advisory
• https://seclists.org/oss-sec/2020/q1/23 · Note
• https://lists.opensuse.org/archives/list/[e-mail]/thread/6FENLJBPGJYRWH4TRRWY3B45BZMEUJD2 · Note
• https://lists.opensuse.org/archives/list/[e-mail]/thread/LH3KEKGAWAXLOMWQWUFGTQDXONO4SZRS · Note