Published: 21/01/2020 Updated: 27/01/2023

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.1 | Impact Score: 5.9 | Exploitability Score: 2.2

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

storeBackup.pl in storeBackup up to and including 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. (Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manually deletes that file.)

Vulnerable Product	Search on Vulmon	Subscribe to Product
storebackup storebackup
debian debian linux 8.0
opensuse leap 15.1
opensuse backports sle 15.0
canonical ubuntu linux 18.04
canonical ubuntu linux 20.04
canonical ubuntu linux 16.04

Debian Bug report logs - #949393 storebackup: CVE-2020-7040: denial of service and symlink attack vector via fixed lockfile path /tmp/storeBackuplock Package: src:storebackup; Maintainer for src:storebackup is Ryan Niebur <ryan@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 20 Jan 2020 ...

oss-sec mailing list archives   By Date By Thread </form>    Re: CVE-2020-7040: storeBackup: denial of service and symlink attack vector via fixed lockfile path /tmp/storeBackuplock <!-- ...

oss-sec mailing list archives   By Date By Thread </form>    CVE-2020-7040: storeBackup: denial of service and symlink attack vector via fixed lockfile path /tmp/storeBackuplock <!--X-Su ...

oss-sec mailing list archives   By Date By Thread </form>    Re: CVE-2020-7040: storeBackup: denial of service and symlink attack vector via fixed lockfile path /tmp/storeBackuplock <!-- ...

CWE-59 https://seclists.org/oss-sec/2020/q1/20 http://www.openwall.com/lists/oss-security/2020/01/20/3 https://bugzilla.suse.com/show_bug.cgi?id=CVE-2020-7040 http://www.openwall.com/lists/oss-security/2020/01/21/2 http://www.openwall.com/lists/oss-security/2020/01/22/2 http://www.openwall.com/lists/oss-security/2020/01/22/3 http://www.openwall.com/lists/oss-security/2020/01/23/1 http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00054.html https://lists.debian.org/debian-lts-announce/2020/02/msg00003.html https://usn.ubuntu.com/4508-1/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=949393 https://nvd.nist.gov

CVE-2020-7040

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

References

Vulmon Search

About

Products

Connect