CVE-2019-3693

A symlink following vulnerability in the packaging of mailman in SUSE Linux Enterprise Server 11, SUSE Linux Enterprise Server 12; openSUSE Leap 15.1 allowed local attackers to escalate their privileges from user wwwrun to root. Additionally arbitrary files could be changed to group mailman. This issue affects: SUSE Linux Enterprise Server 11 mailman versions prior to 2.1.15-9.6.15.1. SUSE Linux Enterprise Server 12 mailman versions prior to 2.1.17-3.11.1. openSUSE Leap 15.1 mailman version 2.1.29-lp151.2.14 and prior versions.

• CWE-59
• CWE-59

• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00059.htmlMailing List, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00000.htmlMailing List, Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1154328Issue Tracking, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00059.htmlMailing List, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00000.htmlMailing List, Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1154328Issue Tracking, Vendor Advisory

Published

Jan 24, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-3687The permission package in SUSE Linux Enterprise Server allow…3.3
• CVE-2019-3688The /usr/sbin/pinger binary packaged with squid in SUSE Linu…7.1
• CVE-2019-3689The nfs-utils package in SUSE Linux Enterprise Server 12 bef…9.8
• CVE-2019-3690The chkstat tool in the permissions package followed symlink…7.8
• CVE-2019-3691A Symbolic Link (Symlink) Following vulnerability in the pac…7.8
• CVE-2019-3692The packaging of inn on SUSE Linux Enterprise Server 11; ope…7.8
• CVE-2019-3694A Symbolic Link (Symlink) Following vulnerability in the pac…7.8
• CVE-2019-3695A Improper Control of Generation of Code vulnerability in th…7.8
• CVE-2019-3696A Improper Limitation of a Pathname to a Restricted Director…7.3
• CVE-2019-3697UNIX Symbolic Link (Symlink) Following vulnerability in the …7.8
• CVE-2019-3698UNIX Symbolic Link (Symlink) Following vulnerability in the …7
• CVE-2019-3699UNIX Symbolic Link (Symlink) Following vulnerability in the …7.8