CVE-2017-16667

backintime aka Back in Time before 1.1.24 did improper escaping/quoting of file paths used as arguments to the 'notify-send' command, leading to some parts of file paths being executed as shell commands within an os.system call in qt4/plugins/notifyplugin.py. This could allow an attacker to craft...

Fedora 26 : backintime (2017-36eb9502b0)

update to 1.1.20 - fixes CVE-2017-7572 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

openSUSE Security Update : backintime (openSUSE-2017-525)

This update for backintime to version 1.1.20 fixes several issues. These security issues were fixed : - CVE-2017-7572: The checkPolkitPrivilege function in serviceHelper.py in backintime used a deprecated polkit authorization method unix-process that is subject to a race condition time of check,...

Fedora 25 : backintime (2017-8dce7a3940)

update to 1.1.20 - fixes CVE-2017-7572 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 24 : backintime (2017-7c9a9b2b36)

update to 1.1.20 - fixes CVE-2017-7572 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for backintime FEDORA-2017-8dce7a3940

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for backintime FEDORA-2017-7c9a9b2b36

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 24 Update: backintime-1.1.20-1.fc24

Back In Time is a simple backup system for Linux inspired from flyback project and TimeVault. The backup is done by taking snapshots of a specified set of directories...

CVE-2017-7572

CVE-2017-7572 affects Back In Time (backintime) up to version 1.1.18, where _checkPolkitPrivilege in serviceHelper.py uses a deprecated polkit method (unix-process) vulnerable to a race condition via /proc//status, enabling privilege elevation given the timing of check/use. Public patching update...

CVE-2009-3611

common/snapshots.py in Back In Time aka backintime 0.9.26 changes certain permissions to 0777 before deleting the files in an old backup snapshot, which allows local users to obtain sensitive information by reading these files, or interfere with backup integrity by modifying files that are shared...

Fedora Core 10 FEDORA-2009-9298 (backintime)

The remote host is missing an update to backintime announced via advisory FEDORA-2009-9298. OpenVAS Vulnerability Test $Id: fcore20099298.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9298 backintime Authors: Thomas Reinke Copyright: Copyright c...

Fedora Core 10 FEDORA-2009-9298 (backintime)

The remote host is missing an update to backintime announced via advisory FEDORA-2009-9298. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora Core 11 FEDORA-2009-9282 (backintime)

The remote host is missing an update to backintime announced via advisory FEDORA-2009-9282. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora 11 : backintime-0.9.26-3.fc11 (2009-9282)

Bug 520210 - backintime: makes all files world-readable in snapshot when removing it Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 10 : backintime-0.9.26-3.fc10 (2009-9298)

Bug 520210 - backintime: makes all files world-readable in snapshot when removing it Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...