Lucene search
Gentoo FoundationGLSA-201405-11HistoryMay 17, 2014 - 12:00 a.m.
Bacula: Information disclosure
2014-05-1700:00:00
Gentoo Foundation
security.gentoo.org
9
0.002 Low
EPSS
Percentile
54.6%
Background
Bacula is a network based backup suite.
Description
Bacula does not properly enforce console access control lists.
Impact
A remote authenticated attacker may be able to bypass restrictions to obtain sensitive information.
Workaround
There is no known workaround at this time.
Resolution
All Bacula users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-backup/bacula-5.2.12"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | app-backup/bacula | < 5.2.12 | UNKNOWN |
Related
prion
prion
Design/Logic Flaw
2012-10-10 18:55:00
openvas
openvas
FreeBSD Ports: bacula
2012-09-15 00:00:00
Debian Security Advisory DSA 2558-1 (bacula)
2012-10-13 00:00:00
Gentoo Security Advisory GLSA 201405-11
2015-09-29 00:00:00
ubuntucve
ubuntucve
CVE-2012-4430
2012-10-10 00:00:00
debian
debian
[SECURITY] [DSA 2558-1] bacula security update
2012-10-08 15:19:59
freebsd
freebsd
bacula -- Console ACL Bypass
2012-09-12 00:00:00
debiancve
debiancve
CVE-2012-4430
2012-10-10 18:55:00
fedora
fedora
[SECURITY] Fedora 16 Update: bacula-5.0.3-33.fc16
2013-01-24 22:02:37
nessus
nessus
Fedora 16 : bacula-5.0.3-33.fc16 (2012-14452)
2013-01-25 00:00:00
GLSA-201405-11 : Bacula: Information disclosure
2014-05-19 00:00:00
Debian DSA-2558-1 : bacula - information disclosure
2012-10-09 00:00:00
securityvulns
securityvulns
bacula restriction bypass
2012-10-10 00:00:00
[SECURITY] [DSA 2558-1] bacula security update
2012-10-10 00:00:00
osv
osv
bacula - information disclosure
2012-10-08 00:00:00
cve
cve
CVE-2012-4430
2012-10-10 18:55:00
cvelist
cvelist
CVE-2012-4430
2012-10-10 18:00:00