Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.2

Lynis before 3.0 allows local file permission bypass

CVE-2020-13882 · published 6 years ago
Summary

The security check that Lynis uses to verify the permissions of its log and report files does not work correctly in versions prior to 3.0. This lets a user without administrative rights create or replace those files and potentially misuse them for further attacks on the same system. Upgrading to Lynis version 3.0 or later resolves the issue.

What to do
  • Update debian lynis to version 3.0.0-1.
  • Update cisofy lynis to version 3.0.0 or later.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian lynis < 3.0.0-1
Fix: upgrade to 3.0.0-1
Debian:13 debian lynis < 3.0.0-1
Fix: upgrade to 3.0.0-1
Debian:14 debian lynis < 3.0.0-1
Fix: upgrade to 3.0.0-1
– cisofy lynis < 3.0.0
cpe:2.3:a:cisofy:lynis:*:*:*:*:*:*:*:*
– fedoraproject fedora 31
32
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
Original advisory text
CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log and report file permissions was not working as intended and could be bypassed...
CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log and report file permissions was not working as intended and could be bypassed locally. Because of the race, an unprivileged attacker can set up a log and report file, and control that up to the point where the specific routine is doing its check. After that, the file can be removed, recreated, and used for additional attacks.
References
Severity
4.2 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition
Timeline
Published18 Jun 2020
Updated4 Nov 2026
First seen11 Sep 2026
Sources
DEBIAN-CVE-2020-13882 · OSV
CVE-2020-13882 · NVD
Track software like this
Free during beta