DEBIAN-CVE-2008-5373

mtx-changer.Adic-Scalar-24 in bacula-common 2.4.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mtx. temporary file, probably a related issue to CVE-2005-2995...

CVE-2008-5373

CVE-2008-5373 affects bacula-common 2.4.2, where the small in-component mtx-changer.Adic-Scalar-24 can be abused by a local attacker to overwrite arbitrary files via a symlink attack on a /tmp/mtx.##### file. The issue is a local privilege/impact chain (CONFIDENTIALITY, INTEGRITY, and AVAILABILIT...

Gentoo Security Advisory GLSA 200807-10 (bacula)

The remote host is missing updates announced in advisory GLSA 200807-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200807-10 (bacula)

The remote host is missing updates announced in advisory GLSA 200807-10. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200807-10 : Bacula: Information disclosure

The remote host is affected by the vulnerability described in GLSA-200807-10 Bacula: Information disclosure Matthijs Kooijman reported that the 'makecatalogbackup' script uses the MySQL password as a command line argument when invoking other programs. Impact : A local attacker could list the...

Bacula: Information disclosure

Background Bacula is a network based backup suite. Description Matthijs Kooijman reported that the "makecatalogbackup" script uses the MySQL password as a command line argument when invoking other programs. Impact A local attacker could list the processes on the local machine when the script is...

Default credentials

makecatalogbackup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffi...

CVE-2007-5626

makecatalogbackup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffi...

CVE-2007-5626

makecatalogbackup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffi...

DEBIAN-CVE-2007-5626

makecatalogbackup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffi...

CVE-2007-5626

makecatalogbackup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffi...

CVE-2007-5626

makecatalogbackup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffi...

CVE-2007-5626

CVE-2007-5626 affects Bacula (noted as make_catalog_backup in 2.2.5 and likely earlier). The vulnerability arises because the MySQL password is passed on the command line and can be exposed by listing running processes or via cleartext emails when the script fails. Connected advisories confirm an...

CVE-2007-5626

makecatalogbackup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffi...

PT-2007-6636 · Bacula · Bacula

Name of the Vulnerable Software and Affected Versions: Bacula version 2.2.5 Description: The issue allows context-dependent attackers to obtain a MySQL password. This is possible because the make catalog backup function in Bacula sends the MySQL password as a command line argument. In some cases,...

bacula insecure temporary file creation

bacula insecure temporary file creation Vendor: http://www.bacula.org/ Advisory: http://www.zataz.net/adviso/bacula-09192005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerabilities ared due to insecure temporary files creations. They are symlink attacks...

bacula symbolic links vulnerability

Temporary files are created insecurely...

CVE-2005-2995

bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on 1 the temporary file used by autoconf/randpass when openssl is not available, or 2 the mtx.PID temporary file in mtx-changer.in...

CVE-2005-2995

bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on 1 the temporary file used by autoconf/randpass when openssl is not available, or 2 the mtx.PID temporary file in mtx-changer.in...

DEBIAN-CVE-2005-2995

bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on 1 the temporary file used by autoconf/randpass when openssl is not available, or 2 the mtx.PID temporary file in mtx-changer.in...