PT-2023-13548 · Amanda+2 · Amanda+2
Prajwaltr93
·
Publicado
2023-01-30
·
Atualizado
2025-11-04
·
CVE-2022-37705
CVSS v3.1
6.7
Média
| Vetor | AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Amanda version 3.5.1
Description
A privilege escalation flaw was found in Amanda, where the backup user can acquire root privileges. The vulnerable component is the runtar SUID program, a wrapper to run /usr/bin/tar with specific arguments that are controllable by the attacker. This program mishandles the arguments passed to the tar binary, as it expects the argument name and value to be separated with a space, but also supports separation with an equals sign.
Recommendations
For Amanda version 3.5.1, consider restricting access to the runtar SUID program until a patch is available. As a temporary workaround, avoid using arguments that separate names and values with an equals sign when interacting with the tar binary through the runtar program.
Exploit
Correção
Argument Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Amanda
Linuxmint
Ubuntu