EUVD-2009-3351

Malware in sbrugna...

BackupPC 'ClientNameAlias' Function Security Bypass Vulnerability

This host has BackupPC intallation and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbbackuppcclientnamealiassecbypassvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ BackupPC 'ClientNameAlias' Function Security Bypass Vulnerability Authors: Sharath S Copyright: Copyrigh...

USN-843-1: BackupPC vulnerability

It was discovered that BackupPC did not restrict normal users from setting the ClientNameAlias parameter. An authenticated user could exploit this to gain access to unauthorized hosts. This update fixed the issue by preventing normal users from modifying the ClientNameAlias configuration paramete...

CVE-2009-3369

CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write sensitive files by modifying ClientNameAlias to match another system, then...

Design/Logic Flaw

CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write sensitive files by modifying ClientNameAlias to match another system, then...

CVE-2009-3369

CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write sensitive files by modifying ClientNameAlias to match another system, then...

CVE-2009-3369

CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write sensitive files by modifying ClientNameAlias to match another system, then...

PT-2009-5676

Name of the Vulnerable Software and Affected Versions: BackupPC version 3.1.0 Description: The issue allows remote authenticated users to read and write sensitive files by modifying the ClientNameAlias function to match another system and then initiating a backup or restore. This is possible when...