BackupPC 'ClientNameAlias()' Security Bypass Vulnerability
BID:36575
Info
BackupPC 'ClientNameAlias()' Security Bypass Vulnerability
| Bugtraq ID: | 36575 |
| Class: | Access Validation Error |
| CVE: |
CVE-2009-3369 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 01 2009 12:00AM |
| Updated: | Oct 28 2009 07:18PM |
| Credit: | David Ambrose-Griffith |
| Vulnerable: |
Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Red Hat Fedora 11 Red Hat Fedora 10 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Craig Barratt BackupPC 3.1 |
| Not Vulnerable: | |
Discussion
BackupPC 'ClientNameAlias()' Security Bypass Vulnerability
BackupPC is prone to a security-bypass vulnerability because it allows authenticated attackers to mimic other systems in a multiuser configuration.
Attackers may exploit the issue to back up (and restore) sensitive files, which can lead to a complete compromise of an affected computer.
BackupPC 3.1.0 is vulnerable; other versions may also be affected.
BackupPC is prone to a security-bypass vulnerability because it allows authenticated attackers to mimic other systems in a multiuser configuration.
Attackers may exploit the issue to back up (and restore) sensitive files, which can lead to a complete compromise of an affected computer.
BackupPC 3.1.0 is vulnerable; other versions may also be affected.
Exploit / POC
BackupPC 'ClientNameAlias()' Security Bypass Vulnerability
Attackers can exploit this issue via a browser.
Attackers can exploit this issue via a browser.
Solution / Fix
BackupPC 'ClientNameAlias()' Security Bypass Vulnerability
Solution:
Updates are available. Please see the references for details.
Ubuntu Ubuntu Linux 8.10 lpia
Ubuntu Ubuntu Linux 9.04 i386
Ubuntu Ubuntu Linux 8.04 LTS powerpc
Ubuntu Ubuntu Linux 9.04 lpia
Ubuntu Ubuntu Linux 8.10 sparc
Ubuntu Ubuntu Linux 8.10 powerpc
Ubuntu Ubuntu Linux 8.04 LTS sparc
Ubuntu Ubuntu Linux 8.10 i386
MandrakeSoft Enterprise Server 5 x86_64
Ubuntu Ubuntu Linux 8.04 LTS i386
Ubuntu Ubuntu Linux 8.04 LTS amd64
MandrakeSoft Enterprise Server 5
Ubuntu Ubuntu Linux 9.04 amd64
Ubuntu Ubuntu Linux 9.04 sparc
Ubuntu Ubuntu Linux 8.10 amd64
Ubuntu Ubuntu Linux 9.04 powerpc
Ubuntu Ubuntu Linux 8.04 LTS lpia
Solution:
Updates are available. Please see the references for details.
Ubuntu Ubuntu Linux 8.10 lpia
-
Ubuntu backuppc_3.1.0-3ubuntu2.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/b/backuppc/backuppc_3.1.0- 3ubuntu2.1_all.deb
Ubuntu Ubuntu Linux 9.04 i386
-
Ubuntu backuppc_3.1.0-4ubuntu1.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/b/backuppc/backuppc_3.1.0- 4ubuntu1.1_all.deb
Ubuntu Ubuntu Linux 8.04 LTS powerpc
-
Ubuntu backuppc_3.0.0-4ubuntu1.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/b/backuppc/backuppc_3.0.0- 4ubuntu1.1_all.deb
Ubuntu Ubuntu Linux 9.04 lpia
-
Ubuntu backuppc_3.1.0-4ubuntu1.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/b/backuppc/backuppc_3.1.0- 4ubuntu1.1_all.deb
Ubuntu Ubuntu Linux 8.10 sparc
-
Ubuntu backuppc_3.1.0-3ubuntu2.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/b/backuppc/backuppc_3.1.0- 3ubuntu2.1_all.deb
Ubuntu Ubuntu Linux 8.10 powerpc
-
Ubuntu backuppc_3.1.0-3ubuntu2.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/b/backuppc/backuppc_3.1.0- 3ubuntu2.1_all.deb
Ubuntu Ubuntu Linux 8.04 LTS sparc
-
Ubuntu backuppc_3.0.0-4ubuntu1.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/b/backuppc/backuppc_3.0.0- 4ubuntu1.1_all.deb
Ubuntu Ubuntu Linux 8.10 i386
-
Ubuntu backuppc_3.1.0-3ubuntu2.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/b/backuppc/backuppc_3.1.0- 3ubuntu2.1_all.deb
MandrakeSoft Enterprise Server 5 x86_64
-
Mandriva backuppc-3.1.0-7.1mdvmes5.noarch.rpm
http://www.mandriva.com/en/download/
Ubuntu Ubuntu Linux 8.04 LTS i386
-
Ubuntu backuppc_3.0.0-4ubuntu1.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/b/backuppc/backuppc_3.0.0- 4ubuntu1.1_all.deb
Ubuntu Ubuntu Linux 8.04 LTS amd64
-
Ubuntu backuppc_3.0.0-4ubuntu1.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/b/backuppc/backuppc_3.0.0- 4ubuntu1.1_all.deb
MandrakeSoft Enterprise Server 5
-
Mandriva backuppc-3.1.0-7.1mdvmes5.noarch.rpm
http://www.mandriva.com/en/download/
Ubuntu Ubuntu Linux 9.04 amd64
-
Ubuntu backuppc_3.1.0-4ubuntu1.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/b/backuppc/backuppc_3.1.0- 4ubuntu1.1_all.deb
Ubuntu Ubuntu Linux 9.04 sparc
-
Ubuntu backuppc_3.1.0-4ubuntu1.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/b/backuppc/backuppc_3.1.0- 4ubuntu1.1_all.deb
Ubuntu Ubuntu Linux 8.10 amd64
-
Ubuntu backuppc_3.1.0-3ubuntu2.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/b/backuppc/backuppc_3.1.0- 3ubuntu2.1_all.deb
Ubuntu Ubuntu Linux 9.04 powerpc
-
Ubuntu backuppc_3.1.0-4ubuntu1.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/b/backuppc/backuppc_3.1.0- 4ubuntu1.1_all.deb
Ubuntu Ubuntu Linux 8.04 LTS lpia
-
Ubuntu backuppc_3.0.0-4ubuntu1.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/b/backuppc/backuppc_3.0.0- 4ubuntu1.1_all.deb
References
BackupPC 'ClientNameAlias()' Security Bypass Vulnerability
References:
References:
- BackupPC Homepage (BackupPC)
- backuppc: Security hole when using rsync and multiple users (David Ambrose-Griffith)