CVE-2023-30577

概要

参考情報

• zmanda/amanda release tag-community-3.5.4 · Release Notes
• zmanda/amanda security advisory · Exploit
• lists.debian.org/debian-lts-announce/2023/12/msg00003.html
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7OITHG7FBD7HQRX2XT75GSGWB3D6XSZU
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YYGJJARVLRBMNWSNXKZBXZNX3M53OVPA
• lists.debian.org/debian-lts-announce/2024/09/msg00023.html

amanda のその他の脆弱性

• CVE-2022-37705中 6.7A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnerable component is the …
• CVE-2022-37704中 6.7Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /…
• CVE-2019-19469高 8.8In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injecti…
• CVE-2016-10730高 7.8An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. Amstar is an Amanda A…
• CVE-2016-10729高 7.8An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. The "runtar" setuid r…