Skip to content
OpenAdvisories
Unscored DSA-1022-1 3 CVEs

storebackup - several

Published Apr 4, 2006 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 storebackup 1.18.4-2sarge1

Vulnerabilities 3

  • Unscored —

    StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack o…

  • Unscored —

    StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sen…

  • Unscored —

    StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup…