CVE-2009-3611

ALTO 7.1CVE-2009-3611 · Published 26/10/2009 · updated 16/06/2026

En resumen

CVE-2009-3611 es una vulnerabilidad ALTO (CVSS 7.1) que afecta a backintime (le-web).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.30%, mayor que el 23.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
backintime le-web	`= 0.9.26`	No fix yet

Description

common/snapshots.py in Back In Time (aka backintime) 0.9.26 changes certain permissions to 0777 before deleting the files in an old backup snapshot, which allows local users to obtain sensitive information by reading these files, or interfere with backup integrity by modifying files that are shared across snapshots.

References

bugs.debian.org/cgi-bin/bugreport.cgi · Mailing List
bugs.gentoo.org/show_bug.cgi · Issue Tracking
ftp.debian.org/debian/pool/main/b/backintime/backintime_0.9.26-3.diff.gz · Broken Link
marc.info · Mailing List
marc.info · Mailing List
bugs.launchpad.net/ubuntu/+source/backintime/+bug/434256 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
redhat.com/archives/fedora-package-announce/2009-September/msg00821.html · Mailing List
redhat.com/archives/fedora-package-announce/2009-September/msg00823.html · Mailing List

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free