6 results · Feed
-
Medium 6.0
Heap-based Buffer Overflow in Bareos Director
In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify job. Disabling verify jobs mitigates t…
-
Unscored —
The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allow…
-
Unscored —
mtx-changer.Adic-Scalar-24 in bacula-common 2.4.2 allows local users to overwrite arbitrary files via a symlink attack …
-
Unscored —
make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and somet…
-
Unscored —
bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on (1) the temporary…
-
Unscored —
zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed strea…