USN-1249-1: BackupPC vulnerabilities

It was discovered that BackupPC did not properly sanitize its input when processing backup browser error messages, resulting in a cross-site scripting XSS vulnerability. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a...

HTB22965: Multiple XSS vulnerabilities in BackupPC

Vulnerability ID: HTB22965 Reference: http://www.htbridge.ch/advisory/multiplexssvulnerabilitiesinbackuppc.html Product: BackupPC Vendor: Craig Barratt http://backuppc.sourceforge.net/ Vulnerable Version: 3.1.0, perhaps 3.2.0 also vulnerable Vendor Notification: 14 April 2011 Vulnerability Type:...

BackupPC 3.1.0 Cross Site Scripting

Vulnerability ID: HTB22965 Reference: http://www.htbridge.ch/advisory/multiplexssvulnerabilitiesinbackuppc.html Product: BackupPC Vendor: Craig Barratt http://backuppc.sourceforge.net/ Vulnerable Version: 3.1.0, perhaps 3.2.0 also vulnerable Vendor Notification: 14 April 2011 Vulnerability Type:...

BackupPC 3.x - 'index.cgi' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47628/info BackupPC is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in th...

Cross-site Scripting (XSS) Vulnerability in BackupPC

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in BackupPC which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in BackupPC The vulnerability exists due to input sanitation error in multiple parameters in...

Fedora Core 10 FEDORA-2009-9973 (BackupPC)

The remote host is missing an update to BackupPC announced via advisory FEDORA-2009-9973. OpenVAS Vulnerability Test $Id: fcore20099973.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9973 BackupPC Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 11 FEDORA-2009-9982 (BackupPC)

The remote host is missing an update to BackupPC announced via advisory FEDORA-2009-9982. OpenVAS Vulnerability Test $Id: fcore20099982.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9982 BackupPC Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 11 FEDORA-2009-9982 (BackupPC)

The remote host is missing an update to BackupPC announced via advisory FEDORA-2009-9982. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 10 FEDORA-2009-9973 (BackupPC)

The remote host is missing an update to BackupPC announced via advisory FEDORA-2009-9973. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora 10 : BackupPC-3.1.0-6.fc10 (2009-9973)

Fri Sep 25 2009 Johan Cwiklinski 3.1.0-6 - Fix security bug bug 518412 - Fri Sep 18 2009 Johan Cwiklinski 3.1.0-5 - Fix SELinux policy module for UserEmailInfo.pl file - Fri Apr 10 2009 Johan Cwiklinski 3.1.0-4 - Fix TopDir change bug 473944 Note that Tenable Network Security has extracted the...

Fedora 11 : BackupPC-3.1.0-7.fc11 (2009-9982)

Fri Sep 25 2009 Johan Cwiklinski 3.1.0-7 - Fix security bug bug 518412 - Fri Sep 18 2009 Johan Cwiklinski 3.1.0-6 - Fix SELinux policy module for UserEmailInfo.pl file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

[SECURITY] Fedora 10 Update: BackupPC-3.1.0-6.fc10

BackupPC is a high-performance, enterprise-grade system for backing up Linux and WinXX PCs and laptops to a server's disk. BackupPC is highly configurab le and easy to install and maintain...

[SECURITY] Fedora 11 Update: BackupPC-3.1.0-7.fc11

BackupPC is a high-performance, enterprise-grade system for backing up Linux and WinXX PCs and laptops to a server's disk. BackupPC is highly configurab le and easy to install and maintain...

Ubuntu USN-843-1 (backuppc)

The remote host is missing an update to backuppc announced via advisory USN-843-1. OpenVAS Vulnerability Test $Id: ubuntu8431.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8431.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-843-1 backuppc Authors: Thomas...

Ubuntu: Security Advisory (USN-843-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BackupPC Version Detection

This script detects the installed version of BackupPC and sets the reuslt in KB. OpenVAS Vulnerability Test $Id: gbbackuppcdetect.nasl 7823 2017-11-20 08:54:04Z cfischer $ BackupPC Version Detection Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net...

BackupPC 'ClientNameAlias' Function Security Bypass Vulnerability

This host has BackupPC intallation and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbbackuppcclientnamealiassecbypassvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ BackupPC 'ClientNameAlias' Function Security Bypass Vulnerability Authors: Sharath S Copyright: Copyrigh...

BackupPC 'ClientNameAlias' Function Security Bypass Vulnerability

BackupPC is prone to a security bypass vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

BackupPC Version Detection

This script detects the installed version of BackupPC. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 8.04 LTS / 8.10 / 9.04 : backuppc vulnerability (USN-843-1)

It was discovered that BackupPC did not restrict normal users from setting the ClientNameAlias parameter. An authenticated user could exploit this to gain access to unauthorized hosts. This update fixed the issue by preventing normal users from modifying the ClientNameAlias configuration paramete...