title: inn: %post calls user owned file allowing local privilege escalation to root
description: A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports SLE-15-SP2, openSUSE Leap 15.2 allows local attackers to escalate their privileges from the news user to root. This issue affects: SUSE Linux Enterprise Server 11-SP3 inn version inn-2.4.2-170.21.3.1 and prior versions. openSUSE Backports SLE-15-SP2 inn versions prior to 2.6.2. openSUSE Leap 15.2 inn versions prior to 2.6.2.
problem types: CWE-276: Incorrect Default Permissions
affected:
{
product: SUSE Linux Enterprise Server 11-SP3
vendor: SUSE
versions:
lessThanOrEqual: inn-2.4.2-170.21.3.1, status: affected, version: inn, versionType: custom
}
{
product: openSUSE Backports SLE-15-SP2
vendor: openSUSE
versions:
lessThan: 2.6.2, status: affected, version: inn, versionType: custom
}
{
product: openSUSE Leap 15.2
vendor: openSUSE
versions:
lessThan: 2.6.2, status: affected, version: inn, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
version: 3.1
]