Security
Security
A vulnerability in Bacula may allow remote attackers to obtain sensitive information.
| Package | app-backup/bacula on all architectures |
|---|---|
| Affected versions | < 5.2.12 |
| Unaffected versions | >= 5.2.12 |
Bacula is a network based backup suite.
Bacula does not properly enforce console access control lists.
A remote authenticated attacker may be able to bypass restrictions to obtain sensitive information.
There is no known workaround at this time.
All Bacula users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-backup/bacula-5.2.12"
Release date
May 17, 2014
Latest revision
May 17, 2014: 1
Severity
low
Exploitable
remote
Bugzilla entries