PT-2020-5139

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise Server 12 versions prior to 2015.09.28.1626-17.27.1 SUSE Linux Enterprise Server 15 versions prior to 20181116-9.23.1 SUSE Linux Enterprise Server 11 versions prior to 2013.1.7-0.6.12.1 Description A UNIX Symbolic Link...

CVE-2019-3690

The chkstat tool in the permissions package followed symlinks before commit a9e1d26cd49ef9ee0c2060c859321128a6dd4230 please also check the additional hardenings after this fix. This allowed local attackers with control over a path that is traversed by chkstat to escalate privileges...

CVE-2019-3690

The chkstat tool in the permissions package followed symlinks before commit a9e1d26cd49ef9ee0c2060c859321128a6dd4230 please also check the additional hardenings after this fix. This allowed local attackers with control over a path that is traversed by chkstat to escalate privileges...

Path traversal

The chkstat tool in the permissions package followed symlinks before commit a9e1d26cd49ef9ee0c2060c859321128a6dd4230 please also check the additional hardenings after this fix. This allowed local attackers with control over a path that is traversed by chkstat to escalate privileges...

CVE-2019-3690

CVE-2019-3690 originates from the chkstat tool in the permissions package, which followed symlinks before commit, enabling local privilege escalation for attackers with control over a traversed path. Connected advisories confirm this vulnerability in SUSE products and document a fix in the relate...

CVE-2019-3690 chkstat follows untrusted symbolic links

The chkstat tool in the permissions package followed symlinks before commit a9e1d26cd49ef9ee0c2060c859321128a6dd4230 please also check the additional hardenings after this fix. This allowed local attackers with control over a path that is traversed by chkstat to escalate privileges...

CVE-2019-3690: Improper Link Resolution Before File Access

The chkstat tool in the permissions package followed symlinks before commit a9e1d26cd49ef9ee0c2060c859321128a6dd4230 please also check the additional hardenings after this fix. This allowed local attackers with control over a path that is traversed by chkstat to escalate privileges...

PT-2019-6218

Name of the Vulnerable Software and Affected Versions permissions package versions prior to commit a9e1d26cd49ef9ee0c2060c859321128a6dd4230 openSUSE Leap affected versions not specified Description The issue is related to the chkstat tool in the permissions package, which followed symlinks,...

CVE-2005-3321

chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by creating a hardlink to a file from a world-writable directory, which can cause the link count to drop to 1 when the file is deleted or replaced, which is then modified by chkstat to use weaker permissions...

CVE-2005-3321

Affected software: SuSE Linux 9.0–10.0. Vulnerable component: chkstat. Local users can cause weaker file permissions by creating a hardlink to a file from a world-writable directory, which reduces the link count to 1 when the original file is deleted or replaced, after which chkstat updates permi...

CVE-2005-3321: Undefined Security Weakness

chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by creating a hardlink to a file from a world-writable directory, which can cause the link count to drop to 1 when the file is deleted or replaced, which is then modified by chkstat to use weaker permissions...

SUSE-SA:2005:062: permissions

The remote host is missing the patch for the advisory SUSE-SA:2005:062 permissions. SUSE LINUX ships with three pre defined sets of permissions, 'easy', 'secure' and 'paranoid'. The chkstat program contained in the permissions package is used to set those permissions to the chosen level. Level...