4 matches found
EUVD-2020-28174
Malware in sbrugna...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : StoreBackup vulnerability (USN-4508-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4508-1 advisory. It was discovered that StoreBackup did not properly manage lock files. A local attacker could use this issue to cause a denial of service ...
DEBIAN-CVE-2020-7040
storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manually deletes that fi...