Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 02:03:28 +0000 CVE-2019-3689 — nfs-utils: root-owned files stored in insecure /var/lib/nfs directory https://cve.radiocsirt.org/vuln/cve-2019-3689 <p><strong>Affected:</strong> SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15</p> <p>The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.</p> <p><strong>Affected:</strong> SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15</p> <p>The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.</p> https://cve.radiocsirt.org/vuln/cve-2019-3689