Most recent entries from all

EUVD-2026-258809

fkie_cve-2022-37705

A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnerable component is the runtar SUID program, which is a wrapper to run /usr/bin/tar with specific arguments that are controllable by the attacker. This program mishandles the arguments passed to tar binary (it expects that the argument name and value are separated with a space; however, separating them with an equals sign is also supported),

GHSA-f6f6-98vp-w8mf

gsd-2022-37705

OESA-2023-1149 — amanda security update

Affected: openEuler:20.03-LTS-SP1: amanda, openEuler:20.03-LTS-SP3: amanda, openEuler:22.03-LTS: amanda, openEuler:22.03-LTS-SP1: amanda

AMANDA, the Advanced Maryland Automatic Network Disk Archiver, is a backup system that allows the administrator of a LAN to set up a single master backup server to back up multiple hosts to a single large capacity tape or disk drive. Amanda uses native tools (such as GNUtar, dump) for backup and can back up a large number of workstations running multiple versions of Unix/Mac OS X/Linux/Windows. Security Fix(es): A flaw was found in Amanda. The `runtar` SUID binary executes /usr/bin/tar as root without properly validating its arguments, possibly leading to escalation of privileges from the regular user "amandabackup" to root.(CVE-2022-37705) A flaw was found in Amanda. The `rundump` SUID binary executes /usr/sbin/dump as root without properly validating its arguments, possibly leading to escalation of privileges from the regular user "amandabackup" to root.(CVE-2022-37704)

openSUSE-SU-2023:0069-1 — Security update for amanda

Security update for amanda

UBUNTU-CVE-2022-37705

Affected: Ubuntu:Pro:16.04:LTS: amanda, Ubuntu:18.04:LTS: amanda, Ubuntu:20.04:LTS: amanda, Ubuntu:22.04:LTS: amanda