CVE-2005-3148

StoreBackup before 1.19 does not properly set the uid and guid for symbolic links 1 that are backed up by storeBackup.pl, or 2 recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership...

DEBIAN-CVE-2005-3146

StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files...

CVE-2005-3147

StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information...

CVE-2005-3148

StoreBackup before 1.19 does not properly set the uid and guid for symbolic links 1 that are backed up by storeBackup.pl, or 2 recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership...

CVE-2005-3147

CVE-2005-3147 affects the storebackup utility. The backup root directory is created with world-readable permissions, enabling local users to access sensitive data. Debian's DSA-1022-1 confirms fixes in storebackup versions 1.18.4-2sarge1 (stable) and 1.19-2 (sid); OpenVAS and SUSE entries corrobo...

CVE-2005-3148

CVE-2005-3148 affects the backup utility storebackup (and related scripts) prior to version 1.19. The issue: symlink ownership (uid/gid) is not set correctly when creating or restoring backups, potentially causing files to be restored with incorrect ownership and possible data exposure. This is d...

CVE-2005-3147

StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information...

CVE-2005-3146

StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files...

CVE-2005-3146

StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files...

CVE-2005-3148

StoreBackup before 1.19 does not properly set the uid and guid for symbolic links 1 that are backed up by storeBackup.pl, or 2 recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership...

CVE-2005-3146

CVE-2005-3146 affects the backup utility StoreBackup. The issue arises from how StoreBackup creates temporary files, enabling a local attacker to perform unauthorized operations on arbitrary files via a symlink attack. Multiple connected sources (e.g., Debian DSA-1022-1, SUSE/Security notes, OSV ...

[SA17025] storeBackup Insecure Temporary File Creation and Insecure Backup Root Permissions

TITLE: storeBackup Insecure Temporary File Creation and Insecure Backup Root Permissions SECUNIA ADVISORY ID: SA17025 VERIFY ADVISORY: http://secunia.com/advisories/17025/ CRITICAL: Less critical IMPACT: Exposure of sensitive information, Privilege escalation WHERE: Local system SOFTWARE:...