p PatchFirst

CVE-2005-2995

CVE-2005-2995

This page contains facts from public vulnerability sources. Check the original advisory before updating.

bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on (1) the temporary file used by autoconf/randpass when openssl is not available, or (2) the mtx.[PID] temporary file in mtx-changer.in.

EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • bacula Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.38.9-1

    Update to 1.38.9-1

  • bacula Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.38.9-1

    Update to 1.38.9-1

  • bacula Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.38.9-1

    Update to 1.38.9-1

Original sources

Check your server →