Groups > linux.debian.bugs.dist > #979167

Bug#940848: nfs-utils:CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs

From	Sylvain Beucler <beuc@beuc.net>
Newsgroups	linux.debian.bugs.dist, linux.debian.kernel
Subject	Bug#940848: nfs-utils:CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs
Date	2019-10-14 10:10 +0200
Message-ID	<yR3At-ns-1@gated-at.bofh.it> (permalink)
References	(1 earlier) <yLYrM-2b4-7@gated-at.bofh.it> <yIxo5-7BN-1@gated-at.bofh.it> <yPlib-855-31@gated-at.bofh.it> <yIxo5-7BN-1@gated-at.bofh.it> <yPlib-855-31@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Hi,

Incidentally I contacted SuSE security who agreed that
fs.protected_symlinks is not a valid mitigation
(they will update MITRE).

I also improved the piuparts check:
#!/bin/sh -ex
if [ -e /var/lib/nfs ]; then
    ls -ld /var/lib/nfs
    ls -ld /var/lib/nfs/sm
    if [ "$(dpkg -l | grep ' nfs-common ' | awk '{print $3}')" !=
'1:1.3.4-2.6' ]; then
        exit 0
    fi
    if [ "$(stat -c '%U:%G' /var/lib/nfs)" != 'root:root' ]; then
        exit 1
    fi
    if [ "$(stat -c '%U:%G' /var/lib/nfs/sm)" != 'statd:nogroup' ]; then
        exit 1
    fi
fi

Cheers!
Sylvain

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Bug#940848: nfs-utils:CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs Salvatore Bonaccorso <carnil@debian.org> - 2019-09-20 22:10 +0200
  Bug#940848: nfs-utils:CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs Sylvain Beucler <beuc@beuc.net> - 2019-09-30 09:40 +0200
    Bug#940848: nfs-utils:CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs Sylvain Beucler <beuc@beuc.net> - 2019-10-09 16:40 +0200
      Bug#940848: nfs-utils:CVE-2019-3689: root-owned files stored in insecure /var/lib/nfs Sylvain Beucler <beuc@beuc.net> - 2019-10-14 10:10 +0200

csiph-web