Summary
Maher Azzouzi discovered an information disclosure vulnerability in the
calcsize binary within amanda. calcsize is a suid binary owned by root that
could possibly be used by a malicious local attacker to expose sensitive
file system information. (CVE-2022-37703)
Maher Azzouzi discovered a privilege escalation vulnerability in the
rundump binary within amanda. rundump is a suid binary owned by root that
did not perform adequate sanitization of environment variables or
commandline options and could possibly be used by a malicious local
attacker to escalate privileges. (CVE-2022-37704)
Maher Azzouzi discovered a privilege escalation vulnerability in the runtar
binary within amanda. runtar is a suid binary owned by root that did not
perform adequate sanitization of commandline options and could possibly be
used by a malicious local attacker to escalate privileges. (CVE-2022-37705)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | amanda | 1:3.3.3-2ubuntu1.1+esm1 |
| Ubuntu · 16.04 LTS 16.04:LTS | amanda | 1:3.3.6-4.1ubuntu0.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | amanda | 1:3.5.1-1ubuntu0.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | amanda | 1:3.5.1-2ubuntu0.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | amanda | 1:3.5.1-8ubuntu1.1 |
Vulnerabilities 3
-
Medium 6.7CVE-2022-37704 Public exploit
Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/r…
-
Unscored —CVE-2022-37703 Public exploit
In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An attacker can abuse this vu…
-
Unscored —CVE-2022-37705 Public exploit
A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnera…