Описание
storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. (Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manually deletes that file.)
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 3.2.1-1+deb8u1build0.18.04.1 |
| devel | not-affected | 3.2.1-2 |
| disco | ignored | end of life |
| eoan | ignored | end of life |
| esm-apps/bionic | released | 3.2.1-1+deb8u1build0.18.04.1 |
| esm-apps/focal | released | 3.2.1-1+deb8u1build0.20.04.1 |
| esm-apps/xenial | released | 3.2.1-1+deb8u1build0.16.04.1 |
| esm-infra-legacy/trusty | DNE | |
| focal | released | 3.2.1-1+deb8u1build0.20.04.1 |
| precise/esm | DNE |
Показывать по
EPSS
9.3 Critical
CVSS2
8.1 High
CVSS3
Связанные уязвимости
storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. (Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manually deletes that file.)
storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBack ...
storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. (Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manually deletes that file.)
EPSS
9.3 Critical
CVSS2
8.1 High
CVSS3