PT-2023-13547 · Amanda+2 · Amanda+2

Pcahyna · Published 2023-01-30 · Updated 2025-02-06 · CVE-2022-37704

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Amanda version 3.5.1

Description The issue allows privilege escalation from a regular user backup to root. A SUID binary located at /lib/amanda/rundump executes /usr/sbin/dump as root with controlled arguments from the attacker, which may lead to escalation of privileges, denial of service, and information disclosure.

Recommendations For Amanda version 3.5.1, consider restricting access to the SUID binary located at /lib/amanda/rundump to minimize the risk of exploitation. As a temporary workaround, consider disabling the execution of /usr/sbin/dump by the SUID binary until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2022-37704

DLA-3330-1

DLA-3880-1

OESA-2023-1149

OPENSUSE-SU-2023:0069-1

OPENSUSE-SU-2024:12808-1

USN-5966-1

USN-5966-2

USN-5966-3

Affected Products

Amanda

Linuxmint

Ubuntu

References · 47

• 🔥 https://github.com/MaherAzzouzi/CVE-2022-37704 · Exploit
• 🔥 https://github.com/MaherAzzouzi/CVE-2022-37705 · Exploit
• 🔥 https://github.com/MaherAzzouzi/CVE-2022-37703 · Exploit
• https://github.com/zmanda/amanda/pull/205 · Patch
• https://github.com/zmanda/amanda/pull/197 · Patch
• https://ubuntu.com/security/CVE-2022-37703 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5966-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5966-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-37705 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-37704 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-37704 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-37704 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2023:0069-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5966-3 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5966-1 · Vendor Advisory