CVE-2020-5202

apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port. The /usr/lib/apt-cacher-ng/acngtool program attempts to connect to apt-cacher-ng via TCP on localhost port 3142, even if the explicit SocketPath=/var/run/apt-cacher-ng/socket command-line option is passed. The cron job /etc/cron.daily/apt-cacher-ng (which is active by default) attempts this periodically. Because 3142 is an unprivileged port, any local user can try to bind to this port and will receive requests from acngtool. There can be sensitive data in these requests, e.g., if AdminAuth is enabled in /etc/apt-cacher-ng/security.conf. This sensitive data can leak to unprivileged local users that manage to bind to this port before the apt-cacher-ng daemon can.

• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00057.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00065.htmlMailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/01/20/4Exploit, Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/01/20/4Exploit, Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/01/20/4Exploit, Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/01/20/4Exploit, Mailing List, Third Party Advisory
• https://seclists.org/oss-sec/2020/q1/21Exploit, Mailing List, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-5202Patch, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00057.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00065.htmlMailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/01/20/4Exploit, Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/01/20/4Exploit, Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/01/20/4Exploit, Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/01/20/4Exploit, Mailing List, Third Party Advisory
• https://seclists.org/oss-sec/2020/q1/21Exploit, Mailing List, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-5202Patch, Third Party Advisory

Published

Jan 21, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-5193PHPGurukul Hospital Management System in PHP v4.0 suffers fr…6.1
• CVE-2020-5194The zip API endpoint in Cerberus FTP Server 8 allows an auth…5.4
• CVE-2020-5195Reflected XSS through an IMG element in Cerberus FTP Server …6.1
• CVE-2020-5196Cerberus FTP Server Enterprise Edition prior to versions 11.…8.1
• CVE-2020-5197An issue was discovered in GitLab Community Edition (CE) and…4.3
• CVE-2020-5200Minerbabe through V4.16 ships with SSH host keys baked into …5.9
• CVE-2020-5203In Fat-Free Framework 3.7.1, attackers can achieve arbitrary…9.8
• CVE-2020-5204In uftpd before 2.11, there is a buffer overflow vulnerabili…8.8
• CVE-2020-5205In Pow (Hex package) before 1.0.16, the use of Plug.Session …5.4
• CVE-2020-5206In Opencast before 7.6 and 8.1, using a remember-me cookie w…10
• CVE-2020-5207In Ktor before 1.3.0, request smuggling is possible when run…7.5
• CVE-2020-5208It's been found that multiple functions in ipmitool before 1…8.8