CVE-2019-20384

Name of the Vulnerable Software and Affected Versions Gentoo Portage versions 2.3.84 and earlier

Description The issue allows local users to place a Trojan horse plugin in the /usr/lib64/nagios/plugins directory by leveraging access to the nagios user account. This is possible because the directory is writable between a call to emake and a call to fowners.

Recommendations For Gentoo Portage versions 2.3.84 and earlier, consider restricting write access to the /usr/lib64/nagios/plugins directory to prevent unauthorized placement of plugins. As a temporary workaround, monitor the directory for any suspicious activity and restrict access to the nagios user account until a fix is available.