Beveiligingsadvies

CVE-2022-37704

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-04-16 00:00:00

Laatst bijgewerkt 2025-11-04 16:09:49

Toegewezen door mitre

CVSS-score 6.7

Status PUBLISHED

Beschrijving

Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of service, and information disclosure.

← Alle CVE's bekijken Bekijk op cve.org ↗