Rezultati pretraživanja za 'Proizvođač: zmanda'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-37704 | 6.7 | Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, | 2025-02-06 18:15:29 | 2023-04-16 01:15:06 |
| CVE-2023-30577 | 7.8 | AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than CVE-2022-37705. | 2024-10-15 19:35:29 | 2023-07-26 17:15:10 |
| CVE-2022-37703 | 3.3 | In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An attacker can abuse this vulnerability to know if a directory exists or not anywhere in the fs. The binary will use `opendir()` as root directly without check | 2023-12-03 11:15:00 | 2022-09-13 20:15:00 |
| CVE-2019-19469 | 6.8 | In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials. | 2020-08-24 17:37:00 | 2019-12-01 14:15:00 |
| CVE-2016-10730 | 7.2 | An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. Amstar is an Amanda Application API script. It should not be run by users directly. It uses star to backup and restore data. It run | 2019-01-09 19:56:00 | 2018-10-24 21:29:00 |
| CVE-2016-10729 | 7.2 | An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. The "runtar" setuid root binary does not check for additional arguments supplied after --create, allowing users to manipulate comma | 2019-01-09 19:54:00 | 2018-10-24 21:29:00 |
| CVE-2009-3102 | 10.0 | The doHotCopy subroutine in socket-server.pl in Zmanda Recovery Manager (ZRM) for MySQL 2.x before 2.1.1 allows remote attackers to execute arbitrary commands via vectors involving a crafted $MYSQL_BINPATH variable. | 2017-08-17 01:31:00 | 2009-09-08 18:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/1
Zapisa po stranici: