Amanda

Amanda

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.3

CVE-2022-37703

  • EPSS 1.45%
  • Published 13.09.2022 20:15:09
  • Last modified 21.11.2024 07:15:04

In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An attacker can abuse this vulnerability to know if a directory exists or not anywhere in the fs. The binary will use `opendir()` as root directly without check...

10

CVE-2002-0901

  • EPSS 8.26%
  • Published 04.10.2002 04:00:00
  • Last modified 03.04.2025 01:03:51

Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long c...