Published: 24/09/2009 Updated: 31/10/2009

CVSS v2 Base Score: 8.5 | Impact Score: 10 | Exploitability Score: 6.8

VMScore: 756

Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C

CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write sensitive files by modifying ClientNameAlias to match another system, then initiating a backup or restore.

Vulnerable Product	Search on Vulmon	Subscribe to Product
craig barratt backuppc 3.1.0

It was discovered that BackupPC did not restrict normal users from setting the ClientNameAlias parameter An authenticated user could exploit this to gain access to unauthorized hosts This update fixed the issue by preventing normal users from modifying the ClientNameAlias configuration parameter ...

CWE-264 http://secunia.com/advisories/36393 http://osvdb.org/57236 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542218 https://bugzilla.redhat.com/show_bug.cgi?id=518412 https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00729.html https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00694.html http://secunia.com/advisories/37161 https://usn.ubuntu.com/843-1/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2009-3369

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect