CVE-2019-18932
- State
- Published
- Severity
- Not scored
- Published
- Jan 21, 2020
- Updated
- Aug 5, 2024
- Reserved
- Nov 13, 2019
Description
log.c in Squid Analysis Report Generator (sarg) through 2.3.11 allows local privilege escalation. By default, it uses a fixed temporary directory /tmp/sarg. As the root user, sarg creates this directory or reuses an existing one in an insecure manner. An attacker can pre-create the directory, and place symlinks in it (after winning a /tmp/sarg/denied.int_unsort race condition). The outcome will be corrupted or newly created files in privileged file system locations.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://bugzilla.suse.com/show_bug.cgi?id=1150554
- https://sourceforge.net/projects/sarg/
- [oss-security] 20200120 CVE-2019-18932: sarg: insecure usage of /tmp/sarg allows privilege escalation / DoS attack vectormailing-list
- [oss-security] CVE-2019-18932: sarg: insecure usage of /tmp/sarg allows privilege escalation / DoS attack vectormailing-list
- [oss-security] 20200127 Re: CVE-2019-18932: sarg: insecure usage of /tmp/sarg allows privilege escalation / DoS attack vectormailing-list
- openSUSE-SU-2020:0117vendor-advisory
- openSUSE-SU-2020:0140vendor-advisory
- GLSA-202007-32vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.