CVE-2022-37704

Suggested description Amanda 3.5.1 has a flaw that allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of...

CVE-2022-37705

Suggested description A privilege escalation flaw was found on Amanda 3.5.1 that can take backup user to root privileges. The vulnerable component is the runtar SUID that is just a wrapper to run /usr/bin/tar with specific arguments that are controllable by the attacker. The program does not chec...

CVE-2022-37703

Suggested description In Amanda 3.5.1, an information leak vulnerability was found in calcsize SUID binary. The attacker can abuse the vulnerability to know if a directory exist or not anywhere in the fs. The binary will use opendir as root directly without checking the path, letting the attacker...

CentOS Linux 8 [TuxCare] Security Update: amanda / amanda-client / amanda-libs / amanda-server (CENTOS-STREAM8:CLSA-2026:1777026752)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1777026752 advisory. - AMANDA Advanced Maryland Automatic Network Disk Archiver before tag-community-3.5.4 mishandles argument checking for runtar.c, a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: amanda (UTSA-2023-002123)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002123 advisory. AMANDA Advanced Maryland Automatic Network Disk Archiver before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than...

EUVD-1999-1498

Malware in sbrugna...

EUVD-2002-0892

Malware in sbrugna...

EUVD-2016-1727

Malware in sbrugna...

EUVD-2016-1728

Malware in sbrugna...

EUVD-2022-40319

Malicious code in bioql PyPI...

EUVD-2023-34958

Malicious code in bioql PyPI...

EUVD-2022-40317

Malicious code in bioql PyPI...

EUVD-2022-40318

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-37704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as roo...

Linux Distros Unpatched Vulnerability : CVE-2022-37705

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnerable component is the runtar SUID program,...

Linux Distros Unpatched Vulnerability : CVE-2022-37703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An attacker can abuse this vulnerability to know if a directory exists...

Linux Distros Unpatched Vulnerability : CVE-2023-30577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AMANDA Advanced Maryland Automatic Network Disk Archiver before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than...

Linux Distros Unpatched Vulnerability : CVE-2016-10730

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. Amstar is an Amanda Application API scrip...

Debian: Security Advisory (DLA-3880-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3880-1] amanda security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3880-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk September 07, 2024 https://wiki.debian.org/LTS -...