Nom du paquet
bacula
Date
2012-10-12
Advisory ID
MDVSA-2012:166
Affected versions
MES5 i586 , MES5 x86_64

Problem description

A vulnerability has been found and corrected in bacula:

The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11
does not properly enforce ACL rules, which allows remote authenticated
users to obtain resource dump information via unspecified vectors
(CVE-2012-4430).

The updated packages have been patched to correct this issue.

Updated packages

MES5 i586

 19c2e396c057a462eed645763f6dd214  mes5/i586/bacula-common-3.0.3-0.2mdvmes5.2.i586.rpm
 2ed8f24e1dd0631c0f66459c803d77d6  mes5/i586/bacula-console-3.0.3-0.2mdvmes5.2.i586.rpm
 125e86f5f3ab21c7187e7250a6a398d4  mes5/i586/bacula-console-gnome-3.0.3-0.2mdvmes5.2.i586.rpm
 02ecfe2faed93c639198d92bdb9136c1  mes5/i586/bacula-console-wx-3.0.3-0.2mdvmes5.2.i586.rpm
 3ece4e74eecdc68f248328b0cd44df91  mes5/i586/bacula-dir-common-3.0.3-0.2mdvmes5.2.i586.rpm
 12eac5efa71756f40c9b87a2196c971d  mes5/i586/bacula-dir-mysql-3.0.3-0.2mdvmes5.2.i586.rpm
 518f88db266dffdc6b28655c59b9cd12  mes5/i586/bacula-dir-pgsql-3.0.3-0.2mdvmes5.2.i586.rpm
 8cc7f89f0b8c9733664e6ae41ef940a4  mes5/i586/bacula-dir-sqlite-3.0.3-0.2mdvmes5.2.i586.rpm
 aa6982dc6d72b8ecebf0e5a2e5b12d93  mes5/i586/bacula-dir-sqlite3-3.0.3-0.2mdvmes5.2.i586.rpm
 fa909ff617fc0985bef861cbcd82ce96  mes5/i586/bacula-fd-3.0.3-0.2mdvmes5.2.i586.rpm
 96557d5790a25b37a6e2e5fb8058b04b  mes5/i586/bacula-gui-bimagemgr-3.0.3-0.2mdvmes5.2.i586.rpm
 ccd13a62c0835c0cc418cda38ba565e6  mes5/i586/bacula-gui-bweb-3.0.3-0.2mdvmes5.2.i586.rpm
 9dcaf0949cb92e3e5137255810699296  mes5/i586/bacula-gui-web-3.0.3-0.2mdvmes5.2.i586.rpm
 5695b3150b11f84223a5152bb30aba64  mes5/i586/bacula-sd-3.0.3-0.2mdvmes5.2.i586.rpm 
 2df32a57b05c2e1290d84786f9ef31c7  mes5/SRPMS/bacula-3.0.3-0.2mdvmes5.2.src.rpm

MES5 x86_64

 b271737aee3770bcd7cef6f1d97875e9  mes5/x86_64/bacula-common-3.0.3-0.2mdvmes5.2.x86_64.rpm
 623c71cdb2c38b1b6f06d6d6a321b6c5  mes5/x86_64/bacula-console-3.0.3-0.2mdvmes5.2.x86_64.rpm
 795c5261d9b92e6868a57da5c554b464  mes5/x86_64/bacula-console-gnome-3.0.3-0.2mdvmes5.2.x86_64.rpm
 8562e98eef26fa0fe1d4eb94cd21dcb0  mes5/x86_64/bacula-console-wx-3.0.3-0.2mdvmes5.2.x86_64.rpm
 2044cbdb6d62d872c79727a67951f218  mes5/x86_64/bacula-dir-common-3.0.3-0.2mdvmes5.2.x86_64.rpm
 c28eec43673f0967e0b17f1baf8b7c42  mes5/x86_64/bacula-dir-mysql-3.0.3-0.2mdvmes5.2.x86_64.rpm
 817f3d6a0697b9c97189592f18f92983  mes5/x86_64/bacula-dir-pgsql-3.0.3-0.2mdvmes5.2.x86_64.rpm
 6d7413099343399fde6d99b3a7df8dd9  mes5/x86_64/bacula-dir-sqlite-3.0.3-0.2mdvmes5.2.x86_64.rpm
 e96a8577bea4e733d9e6f88914684173  mes5/x86_64/bacula-dir-sqlite3-3.0.3-0.2mdvmes5.2.x86_64.rpm
 ac3a716e0e1ce3ee931854e34aeead9d  mes5/x86_64/bacula-fd-3.0.3-0.2mdvmes5.2.x86_64.rpm
 4cb81dd656d54b66f6e62d3dd3454e01  mes5/x86_64/bacula-gui-bimagemgr-3.0.3-0.2mdvmes5.2.x86_64.rpm
 cf2c22981a45797cab0e84afa0d003c8  mes5/x86_64/bacula-gui-bweb-3.0.3-0.2mdvmes5.2.x86_64.rpm
 072cc023f4e40755f27dcb6fdea3985d  mes5/x86_64/bacula-gui-web-3.0.3-0.2mdvmes5.2.x86_64.rpm
 dd975ce1741046ab3e91465920c19e79  mes5/x86_64/bacula-sd-3.0.3-0.2mdvmes5.2.x86_64.rpm 
 2df32a57b05c2e1290d84786f9ef31c7  mes5/SRPMS/bacula-3.0.3-0.2mdvmes5.2.src.rpm

References