214 matches found
CVE-2022-37705
Vorgeschlagene Beschreibung In Amanda 3.5.1 wurde ein Fehler zur Privilegienausweitung gefunden, der den Backup-Benutzer zu Root-Rechten verhelfen kann. Die verwundbare Komponente ist das SUID-Programm runtar, das lediglich ein Wrapper ist, um /usr/bin/tar mit bestimmten Argumenten auszuführen, d...
CVE-2022-37704
Descrizione suggerita Amanda 3.5.1 presenta un difetto che consente l'escalation dei privilegi dall'utente regolare backup a root. Il binario SUID situato in /lib/amanda/rundump esegue /usr/sbin/dump come root con argomenti controllati dall'attaccante, il che può portare a escalazione dei...
CVE-2022-37703
Vorgeschlagene Beschreibung In Amanda 3.5.1 wurde eine Schwachstelle zur Offenlegung von Informationen im SUID-Binary calcsize gefunden. Der Angreifer kann die Schwachstelle ausnutzen, um herauszufinden, ob ein Verzeichnis irgendwo im Dateisystem existiert oder nicht. Das Binary verwendet opendir...
EUVD-2016-1728
Malware in sbrugna...
EUVD-2002-0892
Malware in sbrugna...
EUVD-1999-1498
Malware in sbrugna...
EUVD-2016-1727
Malware in sbrugna...
EUVD-2023-34958
Malicious code in bioql PyPI...
EUVD-2022-40317
Malicious code in bioql PyPI...
EUVD-2022-40318
Malicious code in bioql PyPI...
EUVD-2022-40319
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2022-37704
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as roo...
Linux Distros Unpatched Vulnerability : CVE-2023-30577
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AMANDA Advanced Maryland Automatic Network Disk Archiver before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than...
Linux Distros Unpatched Vulnerability : CVE-2022-37705
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnerable component is the runtar SUID program,...
Linux Distros Unpatched Vulnerability : CVE-2022-37703
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An attacker can abuse this vulnerability to know if a directory exists...
Linux Distros Unpatched Vulnerability : CVE-2016-10730
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. Amstar is an Amanda Application API scrip...
Debian: Security Advisory (DLA-3880-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3880-1] amanda security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3880-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk September 07, 2024 https://wiki.debian.org/LTS -...
Debian dla-3880 : amanda-client - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3880 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3880-1 [email protected]...
