PT-2023-13547 · Amanda+2 · Amanda+2

Pcahyna · Publicado 2023-01-30 · Atualizado 2025-02-06 · CVE-2022-37704

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Amanda version 3.5.1

Description The issue allows privilege escalation from a regular user backup to root. A SUID binary located at /lib/amanda/rundump executes /usr/sbin/dump as root with controlled arguments from the attacker, which may lead to escalation of privileges, denial of service, and information disclosure.

Recommendations For Amanda version 3.5.1, consider restricting access to the SUID binary located at /lib/amanda/rundump to minimize the risk of exploitation. As a temporary workaround, consider disabling the execution of /usr/sbin/dump by the SUID binary until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2022-37704

DLA-3330-1

DLA-3880-1

OESA-2023-1149

OPENSUSE-SU-2023:0069-1

OPENSUSE-SU-2024:12808-1

USN-5966-1

USN-5966-2

USN-5966-3

Produtos afetados

Amanda

Linuxmint

Ubuntu

Referências · 47

• 🔥 https://github.com/MaherAzzouzi/CVE-2022-37704 · Exploit
• 🔥 https://github.com/MaherAzzouzi/CVE-2022-37705 · Exploit
• 🔥 https://github.com/MaherAzzouzi/CVE-2022-37703 · Exploit
• https://github.com/zmanda/amanda/pull/205 · Correção
• https://github.com/zmanda/amanda/releases/tag/tag-community-3.5.3 · Nota
• https://github.com/zmanda/amanda/pull/197 · Correção
• https://github.com/zmanda/amanda/issues/192 · Nota
• https://ubuntu.com/security/CVE-2022-37703 · Aviso do Fabricante
• https://t.me/cibsecurity/62248 · Publicação no Telegram
• https://ubuntu.com/security/notices/USN-5966-2 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-5966-2 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-37705 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2022-37704 · Nota de Segurança
• https://suse.com/security/cve/CVE-2022-37703 · Nota
• https://security-tracker.debian.org/tracker/CVE-2022-37704 · Aviso do Fabricante