Description
common/snapshots.py in Back In Time (aka backintime) 0.9.26 changes certain permissions to 0777 before deleting the files in an old backup snapshot, which allows local users to obtain sensitive information by reading these files, or interfere with backup integrity by modifying files that are shared across snapshots.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | backintime | 0.9.26-3 | — |
| Debian 13 | backintime | 0.9.26-3 | — |
| Debian 12 | backintime | 0.9.26-3 | — |
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=543785
- http://bugs.gentoo.org/show_bug.cgi?id=289047
- http://ftp.debian.org/debian/pool/main/b/backintime/backintime_0.9.26-3.diff.gz
- [oss-security] 20091014 Re: CVE Request - backintime mailing-list
- FEDORA-2009-9282 vendor-advisory
- [oss-security] 20091014 CVE Request - backintime mailing-list
- https://bugs.launchpad.net/ubuntu/+source/backintime/+bug/434256
- https://bugzilla.redhat.com/show_bug.cgi?id=520210
- FEDORA-2009-9298 vendor-advisory