Oval Definition:	oval:org.opensuse.security:def:202015397
Revision Date: 2022-06-30 Version: 1 Title: CVE-2020-15397 Description: HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root). Family: unix Class: vulnerability Status: Reference(s): CVE-2020-15397 openSUSE-SU-2020:1209-1 openSUSE-SU-2020:1210-1 openSUSE-SU-2020:1231-1 openSUSE-SU-2020:1438-1 Mitre CVE-2020-15397 SUSE CVE-2020-15397 openSUSE-SU-2020:1209-1 openSUSE-SU-2020:1210-1 openSUSE-SU-2020:1231-1 openSUSE-SU-2020:1438-1 Platform(s): openSUSE Leap 15.1 openSUSE Leap 15.2 openSUSE Tumbleweed SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Storage 6 SUSE Linux Enterprise Storage 7 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Package Hub for SUSE Linux Enterprise 15 SP1 SUSE Package Hub for SUSE Linux Enterprise 15 SP2 Product(s): Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information hylafax+-7.0.3-lp151.4.6 is installed AND hylafax+ is signed with openSUSE key OR hylafax+-client-7.0.3-lp151.4.6 is installed AND hylafax+-client is signed with openSUSE key OR libfaxutil7_0_3-7.0.3-lp151.4.6 is installed AND libfaxutil7_0_3 is signed with openSUSE key Definition Synopsis openSUSE Leap 15.2 is installed AND Package Information hylafax+-7.0.3-lp152.3.6.1 is installed AND hylafax+ is signed with openSUSE key OR hylafax+-client-7.0.3-lp152.3.6.1 is installed AND hylafax+-client is signed with openSUSE key OR libfaxutil7_0_3-7.0.3-lp152.3.6.1 is installed AND libfaxutil7_0_3 is signed with openSUSE key Definition Synopsis openSUSE Tumbleweed is installed AND Package Information hylafax+-7.0.3-5.1 is installed OR hylafax+-client-7.0.3-5.1 is installed OR libfaxutil7_0_3-7.0.3-5.1 is installed Definition Synopsis SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed AND Package Information hylafax+-7.0.3-bp151.6.4.1 is installed OR hylafax+-client-7.0.3-bp151.6.4.1 is installed OR libfaxutil7_0_3-7.0.3-bp151.6.4.1 is installed Definition Synopsis SUSE Package Hub for SUSE Linux Enterprise 15 SP2 is installed AND Package Information hylafax+-7.0.3-bp152.3.4.1 is installed OR hylafax+-client-7.0.3-bp152.3.4.1 is installed OR libfaxutil7_0_3-7.0.3-bp152.3.4.1 is installed Definition Synopsis Release Information SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed AND hylafax+-7.0.3-bp151.6.4.1 is installed OR hylafax+-client-7.0.3-bp151.6.4.1 is installed OR libfaxutil7_0_3-7.0.3-bp151.6.4.1 is installed OR Package Information SUSE Package Hub for SUSE Linux Enterprise 15 SP2 is installed AND hylafax+-7.0.3-bp152.3.4.1 is installed OR hylafax+-client-7.0.3-bp152.3.4.1 is installed OR libfaxutil7_0_3-7.0.3-bp152.3.4.1 is installed
BACK