Obnam Local Information Disclosure Vulnerability
BID:67776
Info
Obnam Local Information Disclosure Vulnerability
| Bugtraq ID: | 67776 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 18 2014 12:00AM |
| Updated: | Apr 18 2014 12:00AM |
| Credit: | Joey Hess |
| Vulnerable: |
Lars Wirzenius obnam 1.7.4 |
| Not Vulnerable: |
Lars Wirzenius obnam 1.8 |
Discussion
Obnam Local Information Disclosure Vulnerability
Obnam is prone to a local information-disclosure vulnerability.
Local attackers can exploit this issue to obtain sensitive information. Information obtained may lead to further attacks.
Obnam is prone to a local information-disclosure vulnerability.
Local attackers can exploit this issue to obtain sensitive information. Information obtained may lead to further attacks.
Exploit / POC
Obnam Local Information Disclosure Vulnerability
Attackers can exploit this issue through readily available tools.
Attackers can exploit this issue through readily available tools.
References
Obnam Local Information Disclosure Vulnerability
References:
References:
- Debian Bug report logs - #745112 data leak during restore (Joey Hess)
- Obnam Homepage (Lars Wirzenius)
- Obnam NEWS (Lars Wirzenius)