CVE-2020-7040

HIGH

storeBackup < 3.5 - Privilege Escalation via Symlink Attack on /tmp/storeBackup.lock

Title source: llm

Description

storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. (Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manually deletes that file.)

References (10)

Core 10

Core References

Issue Tracking, Third Party Advisory x_refsource_misc

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2020-7040

Mailing List, Third Party Advisory x_refsource_misc

http://www.openwall.com/lists/oss-security/2020/01/20/3

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

https://seclists.org/oss-sec/2020/q1/20

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2020/01/21/2

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2020/01/22/2

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2020/01/22/3

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2020/01/23/1

Mailing List, Patch, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00054.html

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

https://lists.debian.org/debian-lts-announce/2020/02/msg00003.html

Third Party Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/4508-1/

Scores

CVSS v3 8.1

EPSS 0.0519

EPSS Percentile 90.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-59

Status published

Products (7)

canonical/ubuntu_linux 16.04

canonical/ubuntu_linux 18.04

canonical/ubuntu_linux 20.04

debian/debian_linux 8.0

opensuse/backports_sle 15.0 (2 CPE variants)

opensuse/leap 15.1

storebackup/storebackup < 3.5

Published Jan 21, 2020

Tracked Since Feb 18, 2026