CVE-2021-25321

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise Server 11-SP4-LTSS arpwatch versions prior to 2.1a15 SUSE Manager Server 4.0 arpwatch versions prior to 2.1a15 SUSE OpenStack Cloud Crowbar 9 arpwatch versions prior to 2.1a15 openSUSE Factory arpwatch versions prior to 2.1a15-169.5 openSUSE Leap 15.2 arpwatch versions prior to 2.1a15-lp152.5.5

Description A UNIX Symbolic Link (Symlink) Following issue in arpwatch allows local attackers with control of the runtime user to run arpwatch and escalate to root upon the next restart of arpwatch. This is due to incorrect permission assignment for files. The issue can be exploited by a local attacker to gain root privileges.

Recommendations For SUSE Linux Enterprise Server 11-SP4-LTSS, update arpwatch to version 2.1a15 or later. For SUSE Manager Server 4.0, update arpwatch to version 2.1a15 or later. For SUSE OpenStack Cloud Crowbar 9, update arpwatch to version 2.1a15 or later. For openSUSE Factory, update arpwatch to version 2.1a15-169.5 or later. For openSUSE Leap 15.2, update arpwatch to version 2.1a15-lp152.5.5 or later.