SB2020081501 - OpenSUSE Linux update for hylafax+

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2020081501

SB2020081501 - OpenSUSE Linux update for hylafax+

Published: August 15, 2020

Security Bulletin ID SB2020081501
Severity
Low
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Improper Privilege Management (CVE-ID: CVE-2020-15396)

The vulnerability allows a local user to escalate privileges on the system.

In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in user-owned directories. By winning a race, a local attacker could use this to escalate his privileges to root.



2) Improper Privilege Management (CVE-ID: CVE-2020-15397)

The vulnerability allows a local user to escalate privileges on the system.

HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).


Remediation

Install update from vendor's website.

References