ISOMAN

CVE

CVE-2020-7040

storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. (Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manually deletes that file.)

Severity
HIGH
CVSS
8.1
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu20.04.6 amd64 desktopunknownsource
Ubuntu20.04.6 amd64 live-serverunknownsource
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00054.html
  2. http://www.openwall.com/lists/oss-security/2020/01/20/3
  3. http://www.openwall.com/lists/oss-security/2020/01/21/2
  4. http://www.openwall.com/lists/oss-security/2020/01/22/2
  5. http://www.openwall.com/lists/oss-security/2020/01/22/3
  6. http://www.openwall.com/lists/oss-security/2020/01/23/1
  7. https://bugzilla.suse.com/show_bug.cgi?id=CVE-2020-7040
  8. https://lists.debian.org/debian-lts-announce/2020/02/msg00003.html
  9. https://seclists.org/oss-sec/2020/q1/20
  10. https://usn.ubuntu.com/4508-1/
  11. http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00054.html
  12. http://www.openwall.com/lists/oss-security/2020/01/20/3
  13. http://www.openwall.com/lists/oss-security/2020/01/21/2
  14. http://www.openwall.com/lists/oss-security/2020/01/22/2
  15. http://www.openwall.com/lists/oss-security/2020/01/22/3
  16. http://www.openwall.com/lists/oss-security/2020/01/23/1
  17. https://bugzilla.suse.com/show_bug.cgi?id=CVE-2020-7040
  18. https://lists.debian.org/debian-lts-announce/2020/02/msg00003.html
  19. https://seclists.org/oss-sec/2020/q1/20
  20. https://usn.ubuntu.com/4508-1/