NVD

Id
45820  
Name
CVE-2012-4430  
Description
The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-10-10  
Modified Date
2013-04-10  
Seq
2012-4430  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
230000 45820 CVE-2012-4430 http://sourceforge.net/projects/bacula/files/bacula/5.2.12/ReleaseNotes/view  View
230001 45820 CVE-2012-4430 http://www.bacula.org/en/?page=news  View
230002 45820 CVE-2012-4430 http://www.bacula.org/git/cgit.cgi/bacula/commit/?id=67debcecd3d530c429e817e1d778e79dcd1db905  View
230003 45820 CVE-2012-4430 DSA-2558  View
230004 45820 CVE-2012-4430 MDVSA-2012:166  View
230005 45820 CVE-2012-4430 [oss-security] 20120914 CVE request: bacula: Console ACL Bypass  View
230006 45820 CVE-2012-4430 [oss-security] 20120914 Re: CVE request: bacula: Console ACL Bypass  View
230007 45820 CVE-2012-4430 [oss-security] 20120914 Re: Re: CVE request: bacula: Console ACL Bypass  View
230008 45820 CVE-2012-4430 55505  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29217 JVNDB-2012-004924 Bacula の dird/dird_conf.c におけるリソースのダンプ情報を取得される脆弱性 Bacula の dird/dird_conf.c 内の dump_resource 関数は、ACL ルールを適切に適用しないため、リソースのダンプ情報を取得される脆弱性が存在します。 CVE-2012-4430 57668 CVE-2012-4430 45820 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004924.html 2012-08-18 2012-10-15 View