The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5966-1 advisory.

    Maher Azzouzi discovered an information disclosure vulnerability in the calcsize binary within amanda.
    calcsize is a suid binary owned by root that could possibly be used by a malicious local attacker to     expose sensitive file system information. (CVE-2022-37703)

    Maher Azzouzi discovered a privilege escalation vulnerability in the rundump binary within amanda. rundump     is a suid binary owned by root that did not perform adequate sanitization of environment variables or     commandline options and could possibly be used by a malicious local attacker to escalate privileges.
    (CVE-2022-37704)

    Maher Azzouzi discovered a privilege escalation vulnerability in the runtar binary within amanda. runtar     is a suid binary owned by root that did not perform adequate sanitization of commandline options and could     possibly be used by a malicious local attacker to escalate privileges. (CVE-2022-37705)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : amanda vulnerabilities (USN-5966-1)

medium Nessus Plugin ID 173253

Version 1.5