CVE-2019-3698

UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.

• CWE-59
• CWE-59

• http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00014.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00022.htmlMailing List, Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1156309Exploit, Issue Tracking, Patch, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00014.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00022.htmlMailing List, Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1156309Exploit, Issue Tracking, Patch, Vendor Advisory

Published

Feb 28, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-3692The packaging of inn on SUSE Linux Enterprise Server 11; ope…7.8
• CVE-2019-3693A symlink following vulnerability in the packaging of mailma…7.8
• CVE-2019-3694A Symbolic Link (Symlink) Following vulnerability in the pac…7.8
• CVE-2019-3695A Improper Control of Generation of Code vulnerability in th…7.8
• CVE-2019-3696A Improper Limitation of a Pathname to a Restricted Director…7.3
• CVE-2019-3697UNIX Symbolic Link (Symlink) Following vulnerability in the …7.8
• CVE-2019-3699UNIX Symbolic Link (Symlink) Following vulnerability in the …7.8
• CVE-2019-3700yast2-security didn't use secure defaults to protect passwor…3.3
• CVE-2019-3701An issue was discovered in can_can_gw_rcv in net/can/gw.c in…
• CVE-2019-3702A Remote Code Execution issue in the DNS Query Web UI in Lif…
• CVE-2019-3704VNX Control Station in Dell EMC VNX2 OE for File versions pr…7.8
• CVE-2019-3705Dell EMC iDRAC6 versions prior to 2.92, iDRAC7/iDRAC8 versio…9.8