CVE-2012-4430

中危 4.0CVE-2012-4430 · Published 10/10/2012 · updated 16/06/2026

要点

CVE-2012-4430 是影响 bacula (bacula) 的中危 (CVSS 4.0)漏洞。
未来 30 天内被利用的概率（EPSS）：2.7%，高于 85.8% 的漏洞。
修复：升级到 5.2.11 或更高版本。

Package	Affected versions	Patched versions
bacula bacula	`< 5.2.11`	`5.2.11`

Description

The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors.

References

secunia.com/advisories/50535 · Third Party Advisory
secunia.com/advisories/50808 · Third Party Advisory
sourceforge.net/projects/bacula/files/bacula/5.2.12/ReleaseNotes/view · Third Party Advisory
bacula.org/en · Vendor Advisory
bacula.org/git/cgit.cgi/bacula/commit · Patch
debian.org/security/2012/dsa-2558 · Third Party Advisory
mandriva.com/security/advisories · Third Party Advisory
openwall.com/lists/oss-security/2012/09/14/11 · Mailing List
openwall.com/lists/oss-security/2012/09/14/12 · Mailing List
openwall.com/lists/oss-security/2012/09/15/2 · Mailing List
securityfocus.com/bid/55505 · Third Party Advisory

bacula 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free