Zmanda

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Zmanda records in CISA KEV

No Zmanda vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Amanda 6 records LOW Zrm For My Sql 1 record MEDIUM

Records

7 records

TI-2009-02957 CVE-2009-3102 · GHSA-x42x-4h68-vrr4

The doHotCopy subroutine in socket-server.pl in Zmanda Recovery Manager (ZRM) for MySQL…

MEDIUM 49

The doHotCopy subroutine in socket-server.pl in Zmanda Recovery Manager (ZRM) for MySQL 2.x before 2.1.1 allows remote attackers to execute arbitrary commands via vectors involving a crafted $MYSQL_BINPATH variable.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03317 Published 2009-09-08 No fix listed CWE-20

TI-2019-14029 CVE-2019-19469 · GHSA-v8f8-f9x3-fqw4

In Zmanda Management Console 3.3.9…

LOW 39

In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00604 Published 2019-12-01 No fix listed CWE-352

TI-2023-14405 CVE-2023-30577

AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4…

LOW 37

AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than CVE-2022-37705.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00484 Published 2023-07-26 Fix deferred CWE-88

TI-2016-08769 CVE-2016-10729 · GHSA-269f-8j25-5mp2

An issue was discovered in Amanda 3.3.1.

LOW 37

An issue was discovered in Amanda 3.3.1.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.01283 Published 2018-10-24 Will not fix CWE-77

TI-2016-08770 CVE-2016-10730 · GHSA-w8gv-pm6w-gq47

An issue was discovered in Amanda 3.3.1.

LOW 35

An issue was discovered in Amanda 3.3.1.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00586 Published 2018-10-24 Will not fix CWE-264

TI-2022-17534 CVE-2022-37705 · GHSA-f6f6-98vp-w8mf

A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can…

LOW 34

A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.01257 Published 2023-04-16 Fix deferred CWE-88

TI-2022-17533 CVE-2022-37704 · GHSA-2699-8r69-fq67

Amanda 3.5.1 allows privilege escalation from the regular user backup to root.

LOW 32

Amanda 3.5.1 allows privilege escalation from the regular user backup to root.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0053 Published 2023-04-16 Fix deferred CWE-77

Open these records in search →

Critical	1
High	4
Medium	2
Low	0
No CVSS	0