Lucene search
Veracode Vulnerability DatabaseVERACODE:3202HistoryJan 03, 2017 - 5:03 a.m.
Arbitrary Archive File Overwrite
2017-01-0305:03:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
39.4%
Borg (aka BorgBackup) has a flaw in the way of processing duplicate archive names during manifest recovery. When rebuilding the manifest (which should only be needed very rarely), duplicate archive names would be handled on a “first come first serve” basis, allowing an attacker to arbitrarily overwrite archives.
| CPE | Name | Operator | Version |
|---|---|---|---|
| borgbackup | le | 1.0.9rc1 |
Related
debiancve
debiancve
CVE-2016-10100
2017-01-02 21:59:00
nvd
nvd
CVE-2016-10100
2017-01-02 21:59:00
cve
cve
CVE-2016-10100
2017-01-02 21:59:00
ubuntucve
ubuntucve
CVE-2016-10100
2017-01-02 00:00:00
prion
prion
Design/Logic Flaw
2017-01-02 21:59:00
cvelist
cvelist
CVE-2016-10100
2017-01-02 21:09:00