UNIX symbolic link following in icinga - CVE-2019-3698

Vulnerability identifier: #VU68336

CSH Severity: Low

CVSS v4: 7.3 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-3698

CWE-ID: CWE-61

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a symlink following issue in the cronjob shipped with nagios. A local user can create a specially crafted symbolic link to a critical file on the system and overwrite it with privileges of the application.

Successful exploitation of this vulnerability may result in privilege escalation.

icinga
hwdata
grafana-sap-netweaver-dashboards
grafana-sleha-provider
grafana-ha-cluster-dashboards
grafana-sap-providers
icinga-debuginfo
monitoring-tools
icinga-www-config
icinga-www
icinga-plugins-downtimes
icinga-debugsource
icinga-devel
icinga-doc
icinga-idoutils
icinga-idoutils-mysql
icinga-idoutils-oracle
icinga-idoutils-pgsql
icinga-plugins-eventhandlers
sysuser-shadow
sysuser-tools
zeromq-debugsource
libzmq3
libzmq3-debuginfo
zeromq-devel
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Software Development Kit 12
SUSE Manager Tools
SUSE Manager Client Tools for SLE
SUSE Manager Client Tools Beta for SLE
Containers Module
Advanced Systems Management Module
SUSE Linux Enterprise Server for the Raspberry Pi
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Workstation Extension 12
Dell Secure Connect Gateway

Install updates from vendor's website.

icinga - addressed in versions 1.13.3-12.6.1, 1.13.3-12.8.1
hwdata - update to 0.314-10.14.1
grafana-sap-netweaver-dashboards - update to 1.0.3+git.1601889366.9f71957-1.10.1
grafana-sleha-provider - update to 1.1.0+git.1605027022.a84d536-1.10.1
grafana-ha-cluster-dashboards - update to 1.1.0+git.1605027022.a84d536-1.10.1
grafana-sap-providers - update to 1.1-1.7.1
icinga-debuginfo - addressed in versions 1.13.3-12.6.1, 1.13.3-12.8.1
monitoring-tools - addressed in versions 1.13.3-12.6.1, 1.13.3-12.8.1
icinga-www-config - addressed in versions 1.13.3-12.6.1, 1.13.3-12.8.1
icinga-www - addressed in versions 1.13.3-12.6.1, 1.13.3-12.8.1
icinga-plugins-downtimes - addressed in versions 1.13.3-12.6.1, 1.13.3-12.8.1
icinga-debugsource - addressed in versions 1.13.3-12.6.1, 1.13.3-12.8.1
icinga-devel - addressed in versions 1.13.3-12.6.1, 1.13.3-12.8.1
icinga-doc - addressed in versions 1.13.3-12.6.1, 1.13.3-12.8.1
icinga-idoutils - addressed in versions 1.13.3-12.6.1, 1.13.3-12.8.1
icinga-idoutils-mysql - addressed in versions 1.13.3-12.6.1, 1.13.3-12.8.1
icinga-idoutils-oracle - addressed in versions 1.13.3-12.6.1, 1.13.3-12.8.1
icinga-idoutils-pgsql - addressed in versions 1.13.3-12.6.1, 1.13.3-12.8.1
icinga-plugins-eventhandlers - addressed in versions 1.13.3-12.6.1, 1.13.3-12.8.1
sysuser-shadow - update to 2.0-1.9.1
sysuser-tools - update to 2.0-1.9.1
zeromq-debugsource - update to 4.0.4-15.8.1
libzmq3 - update to 4.0.4-15.8.1
libzmq3-debuginfo - update to 4.0.4-15.8.1
zeromq-devel - update to 4.0.4-15.8.1
Dell Secure Connect Gateway - update to 5.24.00.14

• https://bugzilla.suse.com/show_bug.cgi?id=1156309
• http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00014.html
• http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00022.html

• SUSE update for icinga
• SUSE update for SUSE Manager Client Tools Beta
• Multiple vulnerabilities in Dell Secure Connect Gateway