CVE-2022-37703

建议描述 在 Amanda 3.5.1 中，发现了一个信息泄露漏洞，位于 calcsize SUID 二进制文件中。攻击者可利用该漏洞判断 文件系统中的任意目录是否存在。该二进制文件将使用 opendir 以 root 身份直接执行而不检查路径，从而 允许攻击者提供任意路径。攻击者需要是 backup 用户才能运行 calcsize 二进制文件。 附加信息 PoC 非常简单，你只需像这样运行该二进制文件： ./calcsize MAHER dir1 -X directory 如果该二进制文件没有产生任何输出，则说明该目录存在。 如果不存在，它会像这样提示不可用：...

SUSE CVE-2022-37703

In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An attacker can abuse this vulnerability to know if a directory exists or not anywhere in the fs. The binary will use opendir as root directly without checking the path, letting the attacker provide an...

DEBIAN-CVE-2022-37703

In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An attacker can abuse this vulnerability to know if a directory exists or not anywhere in the fs. The binary will use opendir as root directly without checking the path, letting the attacker provide an...

Amanda 路径遍历漏洞

Amanda is an automated network disk archiver organized by the University of Maryland at College Park. Allows IT administrators to set up a single primary backup server to back up multiple hosts to tape drives/converters or disk or optical media over a network. A security vulnerability exists in...

PT-2022-24043 · Amanda +2 · Amanda +2

Name of the Vulnerable Software and Affected Versions: Amanda version 3.5.1 Description: An information leak issue was discovered in the calcsize SUID binary, allowing an attacker to determine if a directory exists anywhere in the file system. The binary uses the opendir function as root without...