The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-1293196f34 advisory.

    Update to version 3.5.3, which contains fixes for three minor security issues as well as other minor     bugfixes.

    https://github.com/zmanda/amanda/releases/tag/tag-community-3.5.3

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root     privileges. The vulnerable component is the runtar SUID program, which is a wrapper to run /usr/bin/tar     with specific arguments that are controllable by the attacker. This program mishandles the arguments     passed to tar binary (it expects that the argument name and value are separated with a space; however,     separating them with an equals sign is also supported), (CVE-2022-37705)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-3d0619d767 advisory.

    Update to version 3.5.3, which contains fixes for three minor security issues as well as other minor     bugfixes.

    https://github.com/zmanda/amanda/releases/tag/tag-community-3.5.3

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3880 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3880-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     September 07, 2024                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : amanda     Version        : 1:3.5.1-7+deb11u1     CVE ID         : CVE-2022-37703 CVE-2022-37704 CVE-2022-37705 CVE-2023-30577     Debian Bug     : 1021017 1029829 1055253

    Multiple vulnerabilities have been fixed in the Amanda backup system.

    CVE-2022-37703

        Directory existence disclosure

    CVE-2022-37704

        Privilege escalation in rundump

    CVE-2022-37705

        Privilege escalation in runtar

    CVE-2023-30577

        Privilege escalation in runtar

    For Debian 11 bullseye, these problems have been fixed in version     1:3.5.1-7+deb11u1.

    We recommend that you upgrade your amanda packages.

    For the detailed security status of amanda please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/amanda

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0069-1 advisory.

  - A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root     privileges. The vulnerable component is the runtar SUID program, which is a wrapper to run /usr/bin/tar     with specific arguments that are controllable by the attacker. This program mishandles the arguments     passed to tar binary (it expects that the argument name and value are separated with a space; however,     separating them with an equals sign is also supported), (CVE-2022-37705)

  - Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at     /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which     may lead to escalation of privileges, denial of service, and information disclosure. (CVE-2022-37704)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5966-1 advisory.

    Maher Azzouzi discovered an information disclosure vulnerability in the calcsize binary within amanda.
    calcsize is a suid binary owned by root that could possibly be used by a malicious local attacker to     expose sensitive file system information. (CVE-2022-37703)

    Maher Azzouzi discovered a privilege escalation vulnerability in the rundump binary within amanda. rundump     is a suid binary owned by root that did not perform adequate sanitization of environment variables or     commandline options and could possibly be used by a malicious local attacker to escalate privileges.
    (CVE-2022-37704)

    Maher Azzouzi discovered a privilege escalation vulnerability in the runtar binary within amanda. runtar     is a suid binary owned by root that did not perform adequate sanitization of commandline options and could     possibly be used by a malicious local attacker to escalate privileges. (CVE-2022-37705)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-e295804b3d advisory.

    Update to version 3.5.3, which contains fixes for three minor security issues as well as other minor     bugfixes.

    https://github.com/zmanda/amanda/releases/tag/tag-community-3.5.3

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5966-3 advisory.

    USN-5966-1 fixed vulnerabilities in amanda. Unfortunately that update caused a regression and was reverted     in USN-5966-2. This update provides security fixes for Ubuntu 22.10, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS     and Ubuntu 18.04 LTS.

    We apologize for the inconvenience.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3681 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3681-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Tobias Frost     December 03, 2023                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : amanda     Version        : 1:3.5.1-2+deb10u2     CVE ID         : CVE-2022-37703 CVE-2022-37705 CVE-2023-30577     Debian Bug     : 1021017 1029829 1055253

    Multiple vulnerabilties have been found in Amanda,a backup system     designed to archive many computers on a network to a single     large-capacity tape drive. The vulnerabilties potentially allows local     privilege escalation from the backup user to root or leak information     whether a directory exists in the filesystem.

    CVE-2022-37703

        In Amanda 3.5.1, an information leak vulnerability was found in the         calcsize SUID binary. An attacker can abuse this vulnerability to         know if a directory exists or not anywhere in the fs. The binary         will use `opendir()` as root directly without checking the path,         letting the attacker provide an arbitrary path.


    CVE-2022-37705

        A privilege escalation flaw was found in Amanda 3.5.1 in which the         backup user can acquire root privileges. The vulnerable component is         the runtar SUID program, which is a wrapper to run /usr/bin/tar with         specific arguments that are controllable by the attacker. This         program mishandles the arguments passed to tar binary.

    CVE-2023-30577

        The SUID binary runtar can accept the possibly malicious GNU tar         options if fed with some non-argument option starting with
        --exclude (say --exclude-vcs). The following option will be         accepted as good and it could be an option passing some         script/binary that would be executed with root permissions.

    For Debian 10 buster, these problems have been fixed in version     1:3.5.1-2+deb10u2.

    We recommend that you upgrade your amanda packages.

    For the detailed security status of amanda please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/amanda

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
173753	Fedora 36 : amanda (2023-1293196f34)	Nessus	Fedora Local Security Checks	4/2/2023	11/14/2024	medium
224839	Linux Distros Unpatched Vulnerability : CVE-2022-37705	Nessus	Misc.	3/5/2025	3/5/2025	medium
173760	Fedora 38 : amanda (2023-3d0619d767)	Nessus	Fedora Local Security Checks	4/2/2023	11/14/2024	medium
206763	Debian dla-3880 : amanda-client - security update	Nessus	Debian Local Security Checks	9/7/2024	9/7/2024	high
172560	openSUSE 15 Security Update : amanda (openSUSE-SU-2023:0069-1)	Nessus	SuSE Local Security Checks	3/15/2023	8/30/2023	medium
173253	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : amanda vulnerabilities (USN-5966-1)	Nessus	Ubuntu Local Security Checks	3/22/2023	8/27/2024	medium
173754	Fedora 37 : amanda (2023-e295804b3d)	Nessus	Fedora Local Security Checks	4/2/2023	11/15/2024	medium
173781	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : amanda regression (USN-5966-3)	Nessus	Ubuntu Local Security Checks	4/3/2023	10/29/2024	medium
186524	Debian dla-3681 : amanda-client - security update	Nessus	Debian Local Security Checks	12/3/2023	1/22/2025	high

Detections

Analytics

Plugins Search

medium

medium

medium

high

medium

medium

medium

medium

high