Several vulnerabilities have been discovered in the backup utility
storebackup.
Storebackup creates a temporary file predictably, which can be
exploited to overwrite arbitrary files on the system with a symlink
attack. (CVE-2005-3146)
The backup root directory is created with world-readable permissions,
which may leak sensitive data. (CVE-2005-3147)
The user and group rights of symlinks are set incorrectly when making
or restoring a backup, which may leak sensitive data. (CVE-2005-3148)
