214 matches found
CVE-2022-37704
Descripción sugerida Amanda 3.5.1 tiene una falla que permite la escalada de privilegios desde el usuario normal backup hasta root. El binario SUID ubicado en /lib/amanda/rundump ejecutará /usr/sbin/dump como root con argumentos controlados por el atacante, lo que puede conducir a la escalada de...
CVE-2022-37705
Descripción sugerida Se encontró una falla de escalada de privilegios en Amanda 3.5.1 que puede llevar al usuario de backup a privilegios de root. El componente vulnerable es el SUID runtar, que es solo un envoltorio para ejecutar /usr/bin/tar con argumentos específicos que son controlables por e...
CVE-2022-37703
Suggested description In Amanda 3.5.1, an information leak vulnerability was found in calcsize SUID binary. The attacker can abuse the vulnerability to know if a directory exist or not anywhere in the fs. The binary will use opendir as root directly without checking the path, letting the attacker...
EUVD-2016-1728
Malware in sbrugna...
EUVD-2002-0892
Malware in sbrugna...
EUVD-2016-1727
Malware in sbrugna...
EUVD-1999-1498
Malware in sbrugna...
EUVD-2023-34958
Malicious code in bioql PyPI...
EUVD-2022-40318
Malicious code in bioql PyPI...
EUVD-2022-40317
Malicious code in bioql PyPI...
EUVD-2022-40319
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2022-37704
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as roo...
Linux Distros Unpatched Vulnerability : CVE-2022-37705
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnerable component is the runtar SUID program,...
Linux Distros Unpatched Vulnerability : CVE-2023-30577
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AMANDA Advanced Maryland Automatic Network Disk Archiver before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than...
Linux Distros Unpatched Vulnerability : CVE-2022-37703
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An attacker can abuse this vulnerability to know if a directory exists...
Linux Distros Unpatched Vulnerability : CVE-2016-10730
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. Amstar is an Amanda Application API scrip...
Debian: Security Advisory (DLA-3880-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3880-1] amanda security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3880-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk September 07, 2024 https://wiki.debian.org/LTS -...
Debian dla-3880 : amanda-client - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3880 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3880-1 [email protected]...
