apt-cacher-ng up to 3.3 acngtool information disclosure

Summaryinfo

A vulnerability described as problematic has been identified in apt-cacher-ng up to 3.3. The affected element is an unknown function in the library /usr/lib/apt-cacher-ng/acngtool. Such manipulation leads to information disclosure. This vulnerability is referenced as CVE-2020-5202. The attack can only be performed from a local environment. No exploit is available.

Detailsinfo

A vulnerability was found in apt-cacher-ng up to 3.3. It has been rated as problematic. Affected by this issue is an unknown code block in the library /usr/lib/apt-cacher-ng/acngtool. The manipulation with an unknown input leads to a information disclosure vulnerability. Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. Impacted is confidentiality. CVE summarizes:

apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port. The /usr/lib/apt-cacher-ng/acngtool program attempts to connect to apt-cacher-ng via TCP on localhost port 3142, even if the explicit SocketPath=/var/run/apt-cacher-ng/socket command-line option is passed. The cron job /etc/cron.daily/apt-cacher-ng (which is active by default) attempts this periodically. Because 3142 is an unprivileged port, any local user can try to bind to this port and will receive requests from acngtool. There can be sensitive data in these requests, e.g., if AdminAuth is enabled in /etc/apt-cacher-ng/security.conf. This sensitive data can leak to unprivileged local users that manage to bind to this port before the apt-cacher-ng daemon can.

The weakness was published 01/21/2020 (oss-sec). The advisory is available at openwall.com. This vulnerability is handled as CVE-2020-5202 since 01/02/2020. Local access is required to approach this attack. The requirement for exploitation is a simple authentication. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1592 by the MITRE ATT&CK project.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Name

• apt-cacher-ng

Version

• 3.0
• 3.1
• 3.2
• 3.3

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion