Debian has released updated packages to correct two vulnerabilities identified in Backup Manager. The first problem is that backup files are created with default permissions making them world readable, which could be exploited by local attackers to obtain sensitive information. The second flaw is due to an error in the CD-burning feature of backup-manager that uses a hardcoded filename in a world-writable directory for logging, which could be exploited to conduct symlink attacks.
ChangeLog
2005-08-26 : Initial release
Vulnerability Management
Subscribe to FrSIRT VNS and receive real-time e-mail and SMS alerts when new vulnerabilities, exploits, or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form or by email to updates@frsirt.com.
French
