bacula: information disclosure [LWN.net]

Package(s):

bacula

CVE #(s):

CVE-2012-4430

Created:

October 8, 2012

Updated:

January 25, 2013

Description:

From the Debian advisory:

It was discovered that bacula, a network backup service, does not properly enforce console ACLs. This could allow information about resources to be dumped by an otherwise-restricted client.

Alerts:

Debian	DSA-2558-1	2012-10-08
Mandriva	MDVSA-2012:166	2012-10-12
Mageia	MGASA-2012-0321	2012-11-06
Fedora	FEDORA-2012-14452	2013-01-24

(Log in to post comments)