CVEvulnerability
CVE-2012-4430
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-10-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors.
Affected configurations
• bacula bacula (< 5.2.11)
• debian debian linux 6.0
• debian debian linux 7.0
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/50535 Third Party Advisory
- http://secunia.com/advisories/50808 Third Party Advisory
- http://sourceforge.net/projects/bacula/files/bacula/5.2.12/ReleaseNotes/view Third Party Advisory
- http://www.bacula.org/en/?page=news Vendor Advisory
- http://www.bacula.org/git/cgit.cgi/bacula/commit/?id=67debcecd3d530c429e817e1d778e79dcd1db905 Patch, Vendor Advisory
- http://www.debian.org/security/2012/dsa-2558 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:166 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2012/09/14/11 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2012/09/14/12 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2012/09/15/2 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/55505 Third Party Advisory, VDB Entry
- http://secunia.com/advisories/50535 Third Party Advisory
- http://secunia.com/advisories/50808 Third Party Advisory
- http://sourceforge.net/projects/bacula/files/bacula/5.2.12/ReleaseNotes/view Third Party Advisory
- http://www.bacula.org/en/?page=news Vendor Advisory
- http://www.bacula.org/git/cgit.cgi/bacula/commit/?id=67debcecd3d530c429e817e1d778e79dcd1db905 Patch, Vendor Advisory
- http://www.debian.org/security/2012/dsa-2558 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:166 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2012/09/14/11 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2012/09/14/12 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2012/09/15/2 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/55505 Third Party Advisory, VDB Entry