CVE-2021-0255

Junos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binaries

State: Published
Severity: 5.5 Medium
Published: Apr 22, 2021
Updated: Sep 16, 2024
Reserved: Oct 27, 2020

Description

A local privilege escalation vulnerability in ethtraceroute of Juniper Networks Junos OS may allow a locally authenticated user with shell access to escalate privileges and write to the local filesystem as root. ethtraceroute is shipped with setuid permissions enabled and is owned by the root user, allowing local users to run ethtraceroute with root privileges. This issue affects Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D240; 17.3 versions prior to 17.3R3-S11, 17.4 versions prior to 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R3-S7; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R2-S7; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S4; 19.3 versions prior to 19.3R3-S2; 19.4 versions prior to 19.4R3-S1; 20.1 versions prior to 20.1R2, 20.1R3; 20.2 versions prior to 20.2R2-S1, 20.2R3; 20.3 versions prior to 20.3R1-S1.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N	juniper

Weaknesses

CWE-250 Execution with Unnecessary Privileges

Affected Products

Product	Versions
Junos OSJuniper Networks	15.1X49 to before 15.1X49-D240Affected 17.3 to before 17.3R3-S11Affected 17.4 to before 17.4R3-S4Affected 18.1 to before 18.1R3-S12Affected 18.2 to before 18.2R3-S7Affected 18.3 to before 18.3R3-S4Affected 18.4 to before 18.4R2-S7Affected 19.1 to before 19.1R1-S6, 19.1R2-S2, 19.1R3-S4Affected 19.3 to before 19.3R3-S2Affected 19.4 to before 19.4R3-S1Affected 20.1 to before 20.1R2, 20.1R3Affected 20.2 to before 20.2R2-S1, 20.2R3Affected 20.3 to before 20.3R1-S1Affected

Product

Versions

Junos OSJuniper Networks

15.1X49 to before 15.1X49-D240Affected
17.3 to before 17.3R3-S11Affected
17.4 to before 17.4R3-S4Affected
18.1 to before 18.1R3-S12Affected
18.2 to before 18.2R3-S7Affected
18.3 to before 18.3R3-S4Affected
18.4 to before 18.4R2-S7Affected
19.1 to before 19.1R1-S6, 19.1R2-S2, 19.1R3-S4Affected
19.3 to before 19.3R3-S2Affected
19.4 to before 19.4R3-S1Affected
20.1 to before 20.1R2, 20.1R3Affected
20.2 to before 20.2R2-S1, 20.2R3Affected
20.3 to before 20.3R1-S1Affected

References

https://kb.juniper.net/JSA11175

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.