CVE-2012-4430

2012-10-1018:55:00

Debian Security Bug Tracker

security-tracker.debian.org

0.002 Low

EPSS

Percentile

54.6%

JSON

The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors.

OSVersionArchitecturePackageVersionFilename
Debian12allbacula< 5.2.6+dfsg-4bacula_5.2.6+dfsg-4_all.deb
Debian11allbacula< 5.2.6+dfsg-4bacula_5.2.6+dfsg-4_all.deb
Debian10allbacula< 5.2.6+dfsg-4bacula_5.2.6+dfsg-4_all.deb
Debian999allbacula< 5.2.6+dfsg-4bacula_5.2.6+dfsg-4_all.deb
Debian13allbacula< 5.2.6+dfsg-4bacula_5.2.6+dfsg-4_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	bacula	< 5.2.6+dfsg-4	bacula_5.2.6+dfsg-4_all.deb
Debian	11	all	bacula	< 5.2.6+dfsg-4	bacula_5.2.6+dfsg-4_all.deb
Debian	10	all	bacula	< 5.2.6+dfsg-4	bacula_5.2.6+dfsg-4_all.deb
Debian	999	all	bacula	< 5.2.6+dfsg-4	bacula_5.2.6+dfsg-4_all.deb
Debian	13	all	bacula	< 5.2.6+dfsg-4	bacula_5.2.6+dfsg-4_all.deb

0.002 Low

EPSS

Percentile

54.6%

JSON

Related for DEBIANCVE:CVE-2012-4430