DeutschShown in its original language — a full translation is planned for a future version.
Net-SNMP: Mehrere Schwachstellen ermöglichen Privilegieneskalation
view advisory published 2020-08-16
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Net-SNMP ausnutzen, um seine Privilegien zu erhöhen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-15862US | high7.8 | — | ||
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root. | ||||
| CVE-2020-15861US | high7.8 | — | ||
Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following. | ||||
02
references
External citations — patches, advisories, analysis.
- CentOS Security Advisory CESA-2020:5350 vom 2021-01-26external
- Oracle Linux Security Advisory ELSA-2020-5350 vom 2020-12-07external
- Oracle Linux Security Advisory ELSA-2020-5480 vom 2020-12-17external
- Red Hat Security Advisory RHSA-2020:5129 vom 2020-11-17external
- Red Hat Security Advisory RHSA-2020:5201 vom 2020-11-24external
- Red Hat Security Advisory RHSA-2020:5350 vom 2020-12-07external
- Red Hat Security Advisory RHSA-2020:5372 vom 2020-12-08external
- Red Hat Security Advisory RHSA-2020:5420 vom 2020-12-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan