Published: 19/09/2019 Updated: 07/11/2023

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

It exists that the nfs-utils package set incorrect permissions on the /var/lib/nfs directory. An attacker could possibly use this issue to escalate privileges.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux-nfs nfs-utils

Debian Bug report logs - #940848 nfs-utils: CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs Package: src:nfs-utils; Maintainer for src:nfs-utils is Debian kernel team <debian-kernel@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 20 Sep 2019 20:09:03 UTC Severity: n ...

nfs-utils could be made to overwrite files as the administrator ...

CWE-276 https://bugzilla.suse.com/show_bug.cgi?id=1150733 https://lists.debian.org/debian-lts-announce/2019/10/msg00026.html http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00071.html http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00006.html https://usn.ubuntu.com/4400-1/https://git.linux-nfs.org/?p=steved/nfs-utils.git%3Ba=commitdiff%3Bh=fee2cc29e888f2ced6a76990923aef19d326dc0e https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940848 https://usn.ubuntu.com/4400-1/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2019-3689

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect