Amanda 3.5.1 allows privilege... CVE-2022-37704

- AV AC AU C I A
发布: 2023-04-16
修订: 2024-11-21

Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of service, and information disclosure.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息