Zmanda Recovery Manager for MySQL Multiple Local Privilege Escalation Vulnerabilities

Bugtraq ID:	42417
Class:	Input Validation Error
CVE:	CVE-2009-3102
Remote:	No
Local:	Yes
Published:	Sep 01 2009 12:00AM
Updated:	Sep 01 2009 12:00AM
Credit:	Evgeny Legerov
Vulnerable:
Not Vulnerable:

Zmanda Recovery Manager for MySQL Multiple Local Privilege Escalation Vulnerabilities

Zmanda Recovery Manager for MySQL is prone to multiple local privilege-escalation vulnerabilities.

A local attacker can exploit these issues to execute arbitrary code and commands with elevated privileges, which may facilitate a compromise of the affected computer.

Zmanda Recovery Manager for MySQL 2.0 is vulnerable; other versions may be affected.

Zmanda Recovery Manager for MySQL Multiple Local Privilege Escalation Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Zmanda Recovery Manager for MySQL Multiple Local Privilege Escalation Vulnerabilities

Solution:
Updates are available; please see the references for more information.

Zmanda Recovery Manager for MySQL Multiple Local Privilege Escalation Vulnerabilities

References:

• Please upgrade to ZRM community release 2.1.1 (Zmanda)
  
• Zmanda Recovery Manager for MySQL (Zmanda)