A vulnerability was found in SuSE Linux Enterprise Server up to 081d081dcfaf61710bda34bc21c80c66276119aa (Operating System). It has been rated as problematic. Affected by this issue is an unknown functionality of the component Permission Package. The manipulation with an unknown input leads to a default permission vulnerability (Sniffing). Using CWE to declare the problem leads to CWE-276. During installation, installed file permissions are set to allow anyone to modify those files. Impacted is confidentiality. CVE summarizes:

The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to 081d081dcfaf61710bda34bc21c80c66276119aa.

The weakness was presented 01/24/2020 as Bug 1148788 as confirmed bug report (Bugzilla). The advisory is available at bugzilla.suse.com. This vulnerability is handled as CVE-2019-3687 since 01/03/2019. Local access is required to approach this attack. The successful exploitation needs a simple authentication. The technical details are unknown and an exploit is not available. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 01/25/2020). This vulnerability is assigned to T1222 by the MITRE ATT&CK project.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

See 67732 for similar entry.

Productinfo

Type

• Operating System

Vendor

• SuSE

Name

• Linux Enterprise Server

Version

• 081d081dcfaf61710bda34bc21c80c66276119aa

License

• open-source

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion