Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

Arch Linux ASA-201701-23 High: Nginx Privilege Escalation Risk

Calendar Jan 15, 2017 • User Avatar LinuxSecurity Advisories
1 min read
Archlinux Large Esm H446
Topics%20covered

Topics Covered

security advisory high severity security issue privilege escalation remote attack nginx Arch Linux
The package nginx before version 1.10.2-3 is vulnerable to privilege escalation. 
Arch Linux Security Advisory ASA-201701-23
=========================================
Severity: High
Date    : 2017-01-15
CVE-ID  : CVE-2016-1247
Package : nginx
Type    : privilege escalation
Remote  : No
Link    : https://security.archlinux.org/AVG-138

Summary
======
The package nginx before version 1.10.2-3 is vulnerable to privilege
escalation.

Resolution
=========
Upgrade to 1.10.2-3.

# pacman -Syu "nginx>=1.10.2-3"

The problem has been fixed upstream but no release is available yet.

Workaround
=========
None.

Description
==========
A symlink attack vulnerability was discovered in nginx. An attacker who
could already run commands under the nginx user id could use this
access to append data to files owned by root, potentially elevating
their own privileges to root.

Impact
=====
A remote attacker who managed to compromise a web application is able
to obtain root privileges on the affected host.

References
=========
https://bugs.archlinux.org/task/52546
https://legalhackers.com/advisories/Nginx-Exploit-Deb-Root-PrivEsc-CVE-2016-1247.html
https://security.archlinux.org/CVE-2016-1247