CVE-2012-4430: Medium severity Bacula bacula vulnerability
Published Oct 10, 2012
·Updated
The dumpresource function in dird/dirdconf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors.
Affected Software
3 affected components
Bacula bacula<5.2.11
Debian Debian Linux=6.0
Debian Debian Linux=7.0
Remediation
Event History
Oct 10, 2012
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4430?
CVE-2012-4430 is rated as a medium severity vulnerability due to its potential to allow unauthorized access to resource information.
2
How do I fix CVE-2012-4430?
To fix CVE-2012-4430, you should upgrade Bacula to version 5.2.11 or later.
3
Which versions of Bacula are affected by CVE-2012-4430?
CVE-2012-4430 affects Bacula versions prior to 5.2.11.
4
What type of users can exploit CVE-2012-4430?
Remote authenticated users can exploit CVE-2012-4430 to obtain resource dump information.
5
Are there specific operating systems impacted by CVE-2012-4430?
Yes, CVE-2012-4430 impacts Bacula installations on Debian Linux versions 6.0 and 7.0.