https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 07:42:01 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-162466 EUVD-2026-162466 https://cve.radiocsirt.org/vuln/euvd-2026-162466 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45044 <p>Bareos is open source software for backup, archiving, and recovery of data for operating systems. When a command ACL is in place and a user executes a command in bconsole using an abbreviation (i.e. &#34;w&#34; for &#34;whoami&#34;) the ACL check did not apply to the full form (i.e. &#34;whoami&#34;) but to the abbreviated form (i.e. &#34;w&#34;). If the command ACL is configured with negative ACL that should forbid using the &#34;whoami&#34; command, you could still use &#34;w&#34; or &#34;who&#34; as a command successfully. Fixes for the problem are shipped in Bareos versions 23.0.4, 22.1.6 and 21.1.11. If only positive command ACLs are used without any negation, the problem does not occur.</p> <p>Bareos is open source software for backup, archiving, and recovery of data for operating systems. When a command ACL is in place and a user executes a command in bconsole using an abbreviation (i.e. &#34;w&#34; for &#34;whoami&#34;) the ACL check did not apply to the full form (i.e. &#34;whoami&#34;) but to the abbreviated form (i.e. &#34;w&#34;). If the command ACL is configured with negative ACL that should forbid using the &#34;whoami&#34; command, you could still use &#34;w&#34; or &#34;who&#34; as a command successfully. Fixes for the problem are shipped in Bareos versions 23.0.4, 22.1.6 and 21.1.11. If only positive command ACLs are used without any negation, the problem does not occur.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45044 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-45044 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: bareos</p> <p>Bareos is open source software for backup, archiving, and recovery of data for operating systems. When a command ACL is in place and a user executes a command in bconsole using an abbreviation (i.e. &#34;w&#34; for &#34;whoami&#34;) the ACL check did not apply to the full form (i.e. &#34;whoami&#34;) but to the abbreviated form (i.e. &#34;w&#34;). If the command ACL is configured with negative ACL that should forbid using the &#34;whoami&#34; command, you could still use &#34;w&#34; or &#34;who&#34; as a command successfully. Fixes for the problem are shipped in Bareos versions 23.0.4, 22.1.6 and 21.1.11. If only positive command ACLs are used without any negation, the problem does not occur.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: bareos</p> <p>Bareos is open source software for backup, archiving, and recovery of data for operating systems. When a command ACL is in place and a user executes a command in bconsole using an abbreviation (i.e. &#34;w&#34; for &#34;whoami&#34;) the ACL check did not apply to the full form (i.e. &#34;whoami&#34;) but to the abbreviated form (i.e. &#34;w&#34;). If the command ACL is configured with negative ACL that should forbid using the &#34;whoami&#34; command, you could still use &#34;w&#34; or &#34;who&#34; as a command successfully. Fixes for the problem are shipped in Bareos versions 23.0.4, 22.1.6 and 21.1.11. If only positive command ACLs are used without any negation, the problem does not occur.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-45044